~ chicken-core (chicken-5) fba81299af14cd0eb0310e36f043dc88c8e2329a
commit fba81299af14cd0eb0310e36f043dc88c8e2329a Author: Peter Bex <peter@more-magic.net> AuthorDate: Thu Mar 16 19:51:07 2017 +0100 Commit: Peter Bex <peter@more-magic.net> CommitDate: Thu Mar 16 19:51:07 2017 +0100 Add CVE-2017-6949 number to changelog. diff --git a/NEWS b/NEWS index b134e0e4..ff3e8cd1 100644 --- a/NEWS +++ b/NEWS @@ -1,8 +1,8 @@ 4.12.1 - Security fixes - - Remove unchecked malloc() call in SRFI-4 constructors when - allocating in non-GC memory, resulting in potential 1-word + - CVE-2017-6949: Remove unchecked malloc() call in SRFI-4 constructors + when allocating in non-GC memory, resulting in potential 1-word buffer overrun and/or segfault (thanks to Lemonboy). - Core LibrariesTrap