aboutsummaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorPaul Eggert <eggert@cs.ucla.edu>2017-10-22 10:00:57 +0200
committerFlorian Weimer <fweimer@redhat.com>2017-10-22 10:01:24 +0200
commita159b53fa059947cc2548e3b0d5bdcf7b9630ba8 (patch)
treeec926a3f2199246bc1ef2c9361afac4a39d7ed21 /NEWS
parent914c9994d27b80bc3b71c483e801a4f04e269ba6 (diff)
downloadglibc-a159b53fa059947cc2548e3b0d5bdcf7b9630ba8.zip
glibc-a159b53fa059947cc2548e3b0d5bdcf7b9630ba8.tar.gz
glibc-a159b53fa059947cc2548e3b0d5bdcf7b9630ba8.tar.bz2
glob: Fix buffer overflow during GLOB_TILDE unescaping [BZ #22332]
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS4
1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index c38fb88..8e040f1 100644
--- a/NEWS
+++ b/NEWS
@@ -82,6 +82,10 @@ Security related changes:
processing, leading to a memory leak and, potentially, to a denial
of service.
+ The glob function, when invoked with GLOB_TILDE and without
+ GLOB_NOESCAPE, could write past the end of a buffer while
+ unescaping user names. Reported by Tim Rühsen.
+
The following bugs are resolved with this release:
[The release manager will add the list generated by