yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-07-08 18:30:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add ChangeLog entry for previous security fix

Browse source 
Fixes #825
This commit is contained in:
Hanno Becker 2017-09-25 10:51:32 +01:00 committed by Manuel Pégourié-Gonnard
parent 2e7fee09da
commit 9a37e0f3be
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
ChangeLog
View file

@ -1,5 +1,15 @@
mbed TLS ChangeLog (Sorted per branch, date) mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS x.x.x branch released xxxx-xx-xx
Security
* Fix a bug in the X.509 module potentially leading to a buffer overread
during CRT verification or to invalid or omitted checks for certificate
validity. The former can be triggered remotely, while the latter requires
a non DER-compliant certificate correctly signed by a trusted CA, or a
trusted CA with a non DER-compliant certificate. Found by luocm on GitHub.
Fixes #825.
= mbed TLS 2.7.1 branch released 2018-02-23 = mbed TLS 2.7.1 branch released 2018-02-23
Default behavior changes Default behavior changes