Update NEWS to add CVE-2017-15804 entry

(cherry picked from commit 15e84c63c05e0652047ba5e738c54d79d62ba74b)

diff --git a/NEWS b/NEWS
index 0531dfa9c6dc05519825a251c08c77308564961a..bc3264325513f024eb61dd836053a41bdf39e7ff 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -30,8 +30,8 @@ Security related changes:
   processing, leading to a memory leak and, potentially, to a denial
   of service.
 
-* The glob function, when invoked with GLOB_TILDE and without
-  GLOB_NOESCAPE, could write past the end of a buffer while
+* CVE-2017-15804: The glob function, when invoked with GLOB_TILDE and
+  without GLOB_NOESCAPE, could write past the end of a buffer while
   unescaping user names.  Reported by Tim Rühsen.
 
 The following bugs are resolved with this release: