Add NEWS entry for CVE-2020-1752 (bug 25414)

This commit is contained in:
Aurelien Jarno 2020-03-19 22:53:00 +01:00
parent 1c15464ca0
commit 39a05214fe

3
NEWS
View File

@ -25,6 +25,9 @@ Security related changes:
corruption when they were passed a pseudo-zero argument. Reported by Guido
Vranken / ForAllSecure Mayhem.
CVE-2020-1752: A use-after-free vulnerability in the glob function when
expanding ~user has been fixed.
The following bugs are resolved with this release:
[The release manager will add the list generated by