From 89aee1e63ad7aa12ac254f6cf064aec69e4b0df1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Manuel=20P=C3=A9gouri=C3=A9-Gonnard?= Date: Thu, 2 Apr 2026 09:35:42 +0200 Subject: [PATCH] Improve Changelog MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Manuel Pégourié-Gonnard --- ChangeLog.d/ecdh-legacy-buffer-overflow.txt | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/ChangeLog.d/ecdh-legacy-buffer-overflow.txt b/ChangeLog.d/ecdh-legacy-buffer-overflow.txt index aa3b5811d8..490fd2ed6f 100644 --- a/ChangeLog.d/ecdh-legacy-buffer-overflow.txt +++ b/ChangeLog.d/ecdh-legacy-buffer-overflow.txt @@ -1,7 +1,6 @@ Security - * Possible buffer overflow in mbedtls_ecdh_calc_secret(): when the provided - output buffer is too small, sometimes (depending on the value of the - computed shared secret), the function would not return an error as it - should, but instead write past the end of the buffer, with consequences - that may range up to arbitrary code execution depending on what follows the - buffer. Reported by Eva Crystal (0xiviel) from XSource Security. + * Fix a possible buffer overflow in mbedtls_ecdh_calc_secret(): when the + provided output buffer is too small, sometimes (depending on the value of + the computed shared secret), the function would not return an error as it + should, but instead write past the end of the buffer. Reported by Eva + Crystal (0xiviel) from XSource Security. CVE-2026-35336