[v2] Add NEWS entry for CVE-2020-10029 (bug 25487)

Message ID 20200306122130.203485-1-aurelien@aurel32.net
State Committed
Headers

Commit Message

Aurelien Jarno March 6, 2020, 12:21 p.m. UTC
  ---
 NEWS | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)
  

Patch

diff --git a/NEWS b/NEWS
index 77631ca7071..e0379fc53c1 100644
--- a/NEWS
+++ b/NEWS
@@ -21,7 +21,9 @@  Changes to build and runtime requirements:
 
 Security related changes:
 
-  [Add security related changes here]
+  CVE-2020-10029: Trigonometric functions on x86 targets suffered from stack
+  corruption when they were passed a pseudo-zero argument.  Reported by Guido
+  Vranken / ForAllSecure Mayhem.
 
 The following bugs are resolved with this release: