From: Florian Weimer <fweimer@redhat.com>
Date: Thu, 24 May 2018 14:27:38 +0000 (+0200)
Subject: Add NEWS entry for CVE-2018-11236
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4df8479e6b3baf365bd4eedbba922b73471e5d73;p=thirdparty%2Fglibc.git

Add NEWS entry for CVE-2018-11236
---

diff --git a/NEWS b/NEWS
index 27548fdb4b2..c6c5538192a 100644
--- a/NEWS
+++ b/NEWS
@@ -74,6 +74,10 @@ Security related changes:
   the value of SIZE_MAX, would return a pointer to a buffer which is too
   small, instead of NULL.
 
+  CVE-2018-11236: Very long pathname arguments to realpath function could
+  result in an integer overflow and buffer overflow.  Reported by Alexey
+  Izbyshev.
+
   CVE-2018-11237: The mempcpy implementation for the Intel Xeon Phi
   architecture could write beyond the target buffer, resulting in a buffer
   overflow.  Reported by Andreas Schwab.