diff options
| -rw-r--r-- | NEWS | 5 |
1 files changed, 3 insertions, 2 deletions
@@ -26,8 +26,9 @@ Version 2.21 * CVE-2012-3406 printf-style functions could run into a stack overflow when processing format strings with a large number of format specifiers. -* The nss_dns implementation of getnetbyname could run into an infinite loop - if the DNS response contained a PTR record of an unexpected format. +* CVE-2014-9402 The nss_dns implementation of getnetbyname could run into an + infinite loop if the DNS response contained a PTR record of an unexpected + format. * The minimum GCC version that can be used to build this version of the GNU C Library is GCC 4.6. Older GCC versions, and non-GNU compilers, can |