~ chicken-core (chicken-5) fba81299af14cd0eb0310e36f043dc88c8e2329a
commit fba81299af14cd0eb0310e36f043dc88c8e2329a
Author: Peter Bex <peter@more-magic.net>
AuthorDate: Thu Mar 16 19:51:07 2017 +0100
Commit: Peter Bex <peter@more-magic.net>
CommitDate: Thu Mar 16 19:51:07 2017 +0100
Add CVE-2017-6949 number to changelog.
diff --git a/NEWS b/NEWS
index b134e0e4..ff3e8cd1 100644
--- a/NEWS
+++ b/NEWS
@@ -1,8 +1,8 @@
4.12.1
- Security fixes
- - Remove unchecked malloc() call in SRFI-4 constructors when
- allocating in non-GC memory, resulting in potential 1-word
+ - CVE-2017-6949: Remove unchecked malloc() call in SRFI-4 constructors
+ when allocating in non-GC memory, resulting in potential 1-word
buffer overrun and/or segfault (thanks to Lemonboy).
- Core Libraries
Trap