diff --git a/NEWS b/NEWS index 013f8ce9b1..4f84a60ff0 100644 --- a/NEWS +++ b/NEWS @@ -103,7 +103,7 @@ Changes to build and runtime requirements: Security related changes: CVE-2021-3326: An assertion failure during conversion from the - qISO-20220-JP-3 character set using the iconv function has been fixed. + ISO-20220-JP-3 character set using the iconv function has been fixed. This assertion was triggered by certain valid inputs in which the converted output contains a combined sequence of two wide characters crossing a buffer boundary. Reported by Tavis Ormandy.