coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-07-30 16:26:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update ChangeLog

Browse Source 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
This commit is contained in:
Ben Taylor 2026-06-05 07:54:38 +01:00
parent d32397563e
commit 835226c59a
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog.d/1583-1584-ssl-transcript-errors.txt
View File

@ -4,10 +4,9 @@ Security
handshake to fail. This could allow a handshake to continue with a master
secret that was not correctly bound to the handshake transcript,
undermining the security guarantees of the extended master secret
extension. Report by Mathew Gretton-Dann
extension. Report by Mathew Gretton-Dann.
* Fix a bug where TLS 1.3 servers could ignore errors when computing the
resumption master secret instead of causing the handshake to fail. This
could allow a server to issue resumption tickets derived from an invalid
resumption secret, weakening authentication of future resumptions made
with those tickets. Reported by jjfz123 / https://github.com/jjfz123 /
https://www.linkedin.com/in/jjfdzcastro1/
with those tickets. Reported by jjfz123.