From 07d16a6debc830ebcf9533da5396edd2eff688e0 Mon Sep 17 00:00:00 2001 From: Aurelien Jarno Date: Tue, 24 Mar 2020 22:49:10 +0100 Subject: [PATCH] Add NEWS entry for CVE-2020-1751 (bug 25423) Reviewed-by: Carlos O'Donell --- NEWS | 3 +++ 1 file changed, 3 insertions(+) diff --git a/NEWS b/NEWS index 68a408a3bc..466c203633 100644 --- a/NEWS +++ b/NEWS @@ -25,6 +25,9 @@ Security related changes: corruption when they were passed a pseudo-zero argument. Reported by Guido Vranken / ForAllSecure Mayhem. + CVE-2020-1751: A defect in the PowerPC backtrace function could cause an + out-of-bounds write when executed in a signal frame context. + CVE-2020-1752: A use-after-free vulnerability in the glob function when expanding ~user has been fixed.