From 6a56ab075779589a0f3a3e5803c622c1143c3f8fea922ca771e4b28649c886d0 Mon Sep 17 00:00:00 2001 From: Martin Pluskal Date: Fri, 19 Mar 2021 07:52:26 +0000 Subject: [PATCH] Accepting request 879135 from home:AndreasStieger:branches:devel:tools:compiler add changlog for CVE-2020-24979 boo#1176227 OBS-URL: https://build.opensuse.org/request/show/879135 OBS-URL: https://build.opensuse.org/package/show/devel:tools:compiler/bison?expand=0&rev=112 --- bison.changes | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/bison.changes b/bison.changes index 08b2043..5e8f87a 100644 --- a/bison.changes +++ b/bison.changes @@ -58,7 +58,8 @@ Sun Sep 6 08:44:24 UTC 2020 - Andreas Stieger - GNU bison 3.7.2: * fix all known Bison CVEs relating to the bison-the-program - itself, not the generated code. + itself, not the generated code. Includes CVE-2020-24979: buffer + overflow in src/symtab.c (boo#1176227) * concurrent build issues * Push parsers always use YYMALLOC/YYFREE * Fix unlikely crashes found by fuzzing