From 315092dd98d5230ef0efa18b294d464d0e9f79d0 Mon Sep 17 00:00:00 2001 From: Jay Berkenbilt Date: Tue, 25 Jul 2017 10:21:27 -0400 Subject: Avoid xref reconstruction infinite loop (fixes #100) This is CVE-2017-9209. --- ChangeLog | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'ChangeLog') diff --git a/ChangeLog b/ChangeLog index 32bafad6..ce0ce1e7 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,9 @@ 2017-07-26 Jay Berkenbilt + * CVE-2017-9209: Fix infinite loop caused by attempting to + reconstruct the xref table while already in the process of + reconstructing the xref table. + * CVE-2017-9210: Fix infinite loop caused by attempting to unparse an object for inclusion in the text of an exception. -- cgit v1.2.3-70-g09d2