Add NEWS entry for CVE-2020-1752 (bug 25414)

(cherry picked from commit 39a05214fe)
This commit is contained in:
Aurelien Jarno 2020-03-19 22:53:00 +01:00
parent ab029a2801
commit 3937f6806d

3
NEWS
View File

@ -21,6 +21,9 @@ Security related changes:
corruption when they were passed a pseudo-zero argument. Reported by Guido corruption when they were passed a pseudo-zero argument. Reported by Guido
Vranken / ForAllSecure Mayhem. Vranken / ForAllSecure Mayhem.
CVE-2020-1752: A use-after-free vulnerability in the glob function when
expanding ~user has been fixed.
Version 2.31 Version 2.31