diff options
| author |   Florian Weimer <fweimer@redhat.com> | 2018-11-27 16:12:43 +0100 |
|---|---|---|
| committer | Florian Weimer <fweimer@redhat.com> | 2018-11-27 18:12:49 +0100 |
| commit | d527c860f5a3f0ed687bd03f0cb464612dc23408 (patch) | |
| tree | e2aaa3fa759808a9fcfd3ef80a73131864deee7b /NEWS | |
| parent | Enable VDSO for static linking on aarch64 (diff) | |
| download | glibc-d527c860f5a3f0ed687bd03f0cb464612dc23408.tar.gz glibc-d527c860f5a3f0ed687bd03f0cb464612dc23408.tar.bz2 glibc-d527c860f5a3f0ed687bd03f0cb464612dc23408.zip | |
CVE-2018-19591: if_nametoindex: Fix descriptor for overlong name [BZ #23927]
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 4 |
1 files changed, 3 insertions, 1 deletions
@@ -57,7 +57,9 @@ Changes to build and runtime requirements: Security related changes: - [Add security related changes here] + CVE-2018-19591: A file descriptor leak in if_nametoindex can lead to a + denial of service due to resource exhaustion when processing getaddrinfo + calls with crafted host names. Reported by Guido Vranken. The following bugs are resolved with this release: |