~ chicken-core (chicken-5) 212590ce959b785373c6eb700d60304a632dd317
commit 212590ce959b785373c6eb700d60304a632dd317
Author: Peter Bex <peter@more-magic.net>
AuthorDate: Thu Mar 16 19:51:07 2017 +0100
Commit: Peter Bex <peter@more-magic.net>
CommitDate: Thu Mar 16 19:51:29 2017 +0100
Add CVE-2017-6949 number to changelog.
diff --git a/NEWS b/NEWS
index 537745dd..4c97bcf0 100644
--- a/NEWS
+++ b/NEWS
@@ -62,8 +62,8 @@
4.12.1
- Security fixes
- - Remove unchecked malloc() call in SRFI-4 constructors when
- allocating in non-GC memory, resulting in potential 1-word
+ - CVE-2017-6949: Remove unchecked malloc() call in SRFI-4 constructors
+ when allocating in non-GC memory, resulting in potential 1-word
buffer overrun and/or segfault (thanks to Lemonboy).
- Core Libraries
Trap