[PATCH 2.22 14/14] Record CVE-2018-6551 in NEWS and ChangeLog [BZ #22774]

[Raphael Moreira Zinsly]

From: Florian Weimer <fweimer@redhat.com>

(cherry picked from commit 71aa429b029fdb6f9e65d44050388b51eca460d6)
---
 ChangeLog | 2 ++
 NEWS      | 4 ++++
 2 files changed, 6 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index 162c5da..bbf02ac 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -10,7 +10,9 @@
 2018-01-18  Arjun Shankar  <arjun@redhat.com>
 
 	[BZ #22343]
+	[BZ #22774]
 	CVE-2018-6485
+	CVE-2018-6551
 	* malloc/malloc.c (checked_request2size): call REQUEST_OUT_OF_RANGE
 	after padding.
 	(_int_memalign): check for integer overflow before calling
diff --git a/NEWS b/NEWS
index d151e13..a8f115f 100644
--- a/NEWS
+++ b/NEWS
@@ -104,6 +104,10 @@ Version 2.22.1
   an object size near the value of SIZE_MAX, would return a pointer to a
   buffer which is too small, instead of NULL.  Reported by Jakub Wilk.
 
+* CVE-2018-6551: The malloc function, when called with an object size near
+  the value of SIZE_MAX, would return a pointer to a buffer which is too
+  small, instead of NULL.
+
 
 Version 2.22
 
-- 
1.8.3.1