public inbox for glibc-cvs@sourceware.org
help / color / mirror / Atom feed
* [glibc] NEWS: Add entry for CVE-2021-27645
@ 2021-03-09 19:40 DJ Delorie
  0 siblings, 0 replies; only message in thread
From: DJ Delorie @ 2021-03-09 19:40 UTC (permalink / raw)
  To: glibc-cvs

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=24eb3be5db5befefe4bcf0f438bf6629a9c3a608

commit 24eb3be5db5befefe4bcf0f438bf6629a9c3a608
Author: DJ Delorie <dj@redhat.com>
Date:   Wed Mar 3 14:52:57 2021 -0500

    NEWS: Add entry for CVE-2021-27645

Diff:
---
 NEWS | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/NEWS b/NEWS
index 73a1a0df97..aa0f10a891 100644
--- a/NEWS
+++ b/NEWS
@@ -31,7 +31,10 @@ Changes to build and runtime requirements:
 
 Security related changes:
 
-  [Add security related changes here]
+  CVE-2021-27645: The nameserver caching daemon (nscd), when processing
+  a request for netgroup lookup, may crash due to a double-free,
+  potentially resulting in degraded service or Denial of Service on the
+  local system.  Reported by Chris Schanzle.
 
 The following bugs are resolved with this release:


^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2021-03-09 19:40 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-03-09 19:40 [glibc] NEWS: Add entry for CVE-2021-27645 DJ Delorie

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).