Label CVE-2014-9402 in NEWS

This commit is contained in:
Allan McRae 2014-12-18 11:01:43 +10:00
parent dd6904541f
commit e54db0ea6a

5
NEWS
View File

@ -26,8 +26,9 @@ Version 2.21
* CVE-2012-3406 printf-style functions could run into a stack overflow when
processing format strings with a large number of format specifiers.
* The nss_dns implementation of getnetbyname could run into an infinite loop
if the DNS response contained a PTR record of an unexpected format.
* CVE-2014-9402 The nss_dns implementation of getnetbyname could run into an
infinite loop if the DNS response contained a PTR record of an unexpected
format.
* The minimum GCC version that can be used to build this version of the GNU
C Library is GCC 4.6. Older GCC versions, and non-GNU compilers, can