coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-13 06:12:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add CVE ID

Browse Source 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
This commit is contained in:
Ronald Cron 2026-09-02 09:34:01 +02:00
parent a5a368690e
commit 5cb95431c4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog
View File

@ -30,7 +30,7 @@ Security
unauthenticated plaintext data to be processed across a key change. In unauthenticated plaintext data to be processed across a key change. In
servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a
man-in-the-middle attacker to cause loss of 0-RTT early data. man-in-the-middle attacker to cause loss of 0-RTT early data.
Reported by Ben Smyth. Reported by Ben Smyth. CVE-2026-73096
* Fix a remote buffer overflow in (D)TLS with ECDHE-PSK cipher suites when * Fix a remote buffer overflow in (D)TLS with ECDHE-PSK cipher suites when
CBC is disabled. Reported by Karnakar Reddy. CVE-2026-50580 CBC is disabled. Reported by Karnakar Reddy. CVE-2026-50580
* Fix a potential information disclosure in TLS 1.2 servers using session * Fix a potential information disclosure in TLS 1.2 servers using session