mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-07-30 16:26:33 +08:00
Update ChangeLog to add CVE
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com> Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com>
This commit is contained in:
parent
fc2f108dfb
commit
75bdaa35c3
@ -4,7 +4,7 @@ Security
|
||||
handshake to fail. This could allow a handshake to continue with a master
|
||||
secret that was not correctly bound to the handshake transcript,
|
||||
undermining the security guarantees of the extended master secret
|
||||
extension. Report by Mathew Gretton-Dann.
|
||||
extension. Report by Mathew Gretton-Dann. CVE-2026-50581
|
||||
* Fix a TLS 1.3 server-side error-handling bug affecting session ticket
|
||||
generation. Under rare conditions, such as memory allocation failures
|
||||
while computing the resumption master secret, the server could issue
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user