~ chicken-core (chicken-5) 212590ce959b785373c6eb700d60304a632dd317
commit 212590ce959b785373c6eb700d60304a632dd317 Author: Peter Bex <peter@more-magic.net> AuthorDate: Thu Mar 16 19:51:07 2017 +0100 Commit: Peter Bex <peter@more-magic.net> CommitDate: Thu Mar 16 19:51:29 2017 +0100 Add CVE-2017-6949 number to changelog. diff --git a/NEWS b/NEWS index 537745dd..4c97bcf0 100644 --- a/NEWS +++ b/NEWS @@ -62,8 +62,8 @@ 4.12.1 - Security fixes - - Remove unchecked malloc() call in SRFI-4 constructors when - allocating in non-GC memory, resulting in potential 1-word + - CVE-2017-6949: Remove unchecked malloc() call in SRFI-4 constructors + when allocating in non-GC memory, resulting in potential 1-word buffer overrun and/or segfault (thanks to Lemonboy). - Core LibrariesTrap