Record CVE-2018-6551 in NEWS and ChangeLog [BZ #22774]

(cherry picked from commit 71aa429b029fdb6f9e65d44050388b51eca460d6)

diff --git a/ChangeLog b/ChangeLog
index e92c11060240964b0205329a921ed0b0ecabbf89..0b838029c05e25d26eaacdc280e63cf74b22f8d0 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,7 +1,9 @@
 2018-01-18  Arjun Shankar  <arjun@redhat.com>
 
        [BZ #22343]
+       [BZ #22774]
        CVE-2018-6485
+       CVE-2018-6551
        * malloc/malloc.c (checked_request2size): call REQUEST_OUT_OF_RANGE
        after padding.
        (_int_memalign): check for integer overflow before calling

diff --git a/NEWS b/NEWS
index ac8901e05da176fb4880c3da5518509518007700..db81e9e6b14e980098e2f3d1919399a73512160f 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -91,6 +91,10 @@ Version 2.22.1
 * CVE-2018-6485: The posix_memalign and memalign functions, when called with
   an object size near the value of SIZE_MAX, would return a pointer to a
   buffer which is too small, instead of NULL.  Reported by Jakub Wilk.
+
+* CVE-2018-6551: The malloc function, when called with an object size near
+  the value of SIZE_MAX, would return a pointer to a buffer which is too
+  small, instead of NULL.
 \f
 Version 2.22