From b8fab3f3f942d1de3bb8dae93cf8b5e379f5f1c8 Mon Sep 17 00:00:00 2001 From: Aurelien Jarno Date: Sun, 12 Jul 2020 21:58:43 +0200 Subject: Add NEWS entry for CVE-2020-6096 (bug 25620) Reviewed-by: Carlos O'Donell (cherry picked from commit 17400c4bcd57d84add1da3aa93248ef2efdb0ccb) (cherry picked from commit 6f3459f9859a7b506c64fa1823769ab631072c6e) --- NEWS | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/NEWS b/NEWS index 0e2dc39523..daf4b727cd 100644 --- a/NEWS +++ b/NEWS @@ -37,6 +37,11 @@ Security related changes: CVE-2020-1752: A use-after-free vulnerability in the glob function when expanding ~user has been fixed. + CVE-2020-6096: A signed comparison vulnerability in the ARMv7 memcpy and + memmove functions has been fixed. Discovered by Jason Royes and Samual + Dytrych of the Cisco Security Assessment and Penetration Team (See + TALOS-2020-1019). + Version 2.31 -- cgit v1.2.3-65-gdbad