~ chicken-core (chicken-5) 729febc07a94074b36e403f3ead2d3519470d0f8
commit 729febc07a94074b36e403f3ead2d3519470d0f8
Author: Moritz Heidkamp <moritz.heidkamp@bevuta.com>
AuthorDate: Thu Sep 11 12:25:48 2014 +0200
Commit: Moritz Heidkamp <moritz.heidkamp@bevuta.com>
CommitDate: Thu Sep 11 12:25:48 2014 +0200
Update NEWS to mention CVE-2014-6310.
diff --git a/NEWS b/NEWS
index 7a627523..c1d3882a 100644
--- a/NEWS
+++ b/NEWS
@@ -1,7 +1,8 @@
4.9.1
- Security fixes
- - Use POSIX poll() on Android (CVE pending).
+ - CVE-2014-6310: Use POSIX poll() on Android platform to avoid
+ potential select() buffer overrun.
- Core libraries
- alist-ref from unit data-structures now gives an error when passed
Trap