From 24eb3be5db5befefe4bcf0f438bf6629a9c3a608 Mon Sep 17 00:00:00 2001 From: DJ Delorie Date: Wed, 3 Mar 2021 14:52:57 -0500 Subject: [PATCH] NEWS: Add entry for CVE-2021-27645 --- NEWS | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 73a1a0df97..aa0f10a891 100644 --- a/NEWS +++ b/NEWS @@ -31,7 +31,10 @@ Changes to build and runtime requirements: Security related changes: - [Add security related changes here] + CVE-2021-27645: The nameserver caching daemon (nscd), when processing + a request for netgroup lookup, may crash due to a double-free, + potentially resulting in degraded service or Denial of Service on the + local system. Reported by Chris Schanzle. The following bugs are resolved with this release: