summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--buffered-reader/NEWS6
1 files changed, 5 insertions, 1 deletions
diff --git a/buffered-reader/NEWS b/buffered-reader/NEWS
index 36c08ce6..44f485df 100644
--- a/buffered-reader/NEWS
+++ b/buffered-reader/NEWS
@@ -5,7 +5,11 @@
* Changes in 1.2.0
** Notable changes
- BufferedReader::copy is like std::io::copy, but more efficient.
-
+ * Notable fixes
+ - A parser bug was fixed. We classify this as a low-severity
+ issue, because Rust correctly detects the out-of-bounds access
+ and panics. If an attacker controls the input, they may be able
+ to use this bug to cause a denial of service.
* Changes in 1.1.2
** Notable changes
- The generic buffered reader now correctly handles end-of-file