Add NEWS entry for CVE-2020-29562 (BZ #26923)

Message ID 20201207171706.293438-1-siddhesh@sourceware.org
State Committed
Headers
Series Add NEWS entry for CVE-2020-29562 (BZ #26923) |

Commit Message

Siddhesh Poyarekar Dec. 7, 2020, 5:17 p.m. UTC
  BZ #26923 now has a CVE entry, so add a NEWS entry for it.
---
 NEWS | 3 +++
 1 file changed, 3 insertions(+)
  

Comments

Siddhesh Poyarekar Dec. 8, 2020, 2:35 p.m. UTC | #1
On 12/7/20 10:47 PM, Siddhesh Poyarekar via Libc-alpha wrote:
> BZ #26923 now has a CVE entry, so add a NEWS entry for it.
> ---
>   NEWS | 3 +++
>   1 file changed, 3 insertions(+)
> 

Now committed.

Siddhesh
  

Patch

diff --git a/NEWS b/NEWS
index aa7bbf033b..21d2f14995 100644
--- a/NEWS
+++ b/NEWS
@@ -66,6 +66,9 @@  Security related changes:
   invoked with input containing redundant shift sequences in the IBM1364,
   IBM1371, IBM1388, IBM1390, or IBM1399 character sets.
 
+  CVE-2020-29562: An assertion failure has been fixed in the iconv function
+  when invoked with UCS4 input containing an invalid character.
+
 The following bugs are resolved with this release:
 
   [The release manager will add the list generated by