BZ #15754: CVE-2013-4788

[thirdparty/glibc.git] / NEWS

diff --git a/NEWS b/NEWS
index b52b52eea7336b4ab547f37b524bea9911d683db..62c58b25991fd550c255043a7090903d2b725281 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -10,9 +10,15 @@ Version 2.19
 * The following bugs are resolved with this release:
 
   13985, 14155, 14699, 15427, 15522, 15531, 15532, 15640, 15736, 15748,
-  15749, 15797, 15844, 15849, 15855, 15856, 15857, 15859, 15867, 15886,
-  15887, 15890, 15892, 15893, 15895, 15897, 15905, 15909, 15919, 15921,
-  15923, 15939, 15963, 15966.
+  15749, 15754, 15797, 15844, 15849, 15855, 15856, 15857, 15859, 15867,
+  15886, 15887, 15890, 15892, 15893, 15895, 15897, 15905, 15909, 15919,
+  15921, 15923, 15939, 15963, 15966.
+
+* CVE-2013-4788 The pointer guard used for pointer mangling was not
+  initialized for static applications resulting in the security feature
+  being disabled. The pointer guard is now correctly initialized to a
+  random value for static applications. Existing static applications need
+  to be recompiled to take advantage of the fix (bug 15754).
 
 * CVE-2013-4237 The readdir_r function could write more than NAME_MAX bytes
   to the d_name member of struct dirent, or omit the terminating NUL