From 301e0d6f9a2218f2d1943860c2d14046b917e846 Mon Sep 17 00:00:00 2001 From: Will Newton Date: Fri, 13 Sep 2013 09:26:02 +0100 Subject: Add CVE-2013-4332 to NEWS. --- NEWS | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/NEWS b/NEWS index 96df7a9..e2931f1 100644 --- a/NEWS +++ b/NEWS @@ -22,6 +22,11 @@ Version 2.18.1 * CVE-2013-4458 Stack overflow in getaddrinfo with large number of results for AF_INET6 has been fixed (Bugzilla #16072). +* CVE-2013-4332 The pvalloc, valloc, memalign, posix_memalign and + aligned_alloc functions could allocate too few bytes or corrupt the + heap when passed very large allocation size values (Bugzilla #15855, + #15856, #15857). + * CVE-2012-4424 The strcoll implementation uses malloc to cache indices and rules for large collation sequences to optimize multiple passes and falls back to alloca if malloc fails, resulting in a possible stack overflow. -- cgit v1.1