Add changelog entry for the unchecked mbedtls_md call

This commit is contained in:
Gilles Peskine 2020-01-22 19:04:19 +01:00 committed by Simon Butcher
parent 140f50206e
commit c0213a91ab

View file

@ -65,6 +65,11 @@ Changes
= mbed TLS 2.16.x branch released xxxx-xx-xx
Bugfix
* Fix an unchecked call to mbedtls_md() in the x509write module.
= mbed TLS 2.16.4 branch released 2020-01-15
Security
* Fix side channel vulnerability in ECDSA. Our bignum implementation is not
constant time/constant trace, so side channel attacks can retrieve the