coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-07-30 16:26:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix reporters in ChangeLog

Browse Source 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
This commit is contained in:
Ben Taylor 2026-06-04 12:12:00 +01:00
parent f63a0058d3
commit d32397563e
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog.d/1583-1584-ssl-transcript-errors.txt
View File

@ -4,10 +4,10 @@ Security
handshake to fail. This could allow a handshake to continue with a master
secret that was not correctly bound to the handshake transcript,
undermining the security guarantees of the extended master secret
extension. Reported by jjfz123 / https://github.com/jjfz123 /
https://www.linkedin.com/in/jjfdzcastro1/
extension. Report by Mathew Gretton-Dann
* Fix a bug where TLS 1.3 servers could ignore errors when computing the
resumption master secret instead of causing the handshake to fail. This
could allow a server to issue resumption tickets derived from an invalid
resumption secret, weakening authentication of future resumptions made
with those tickets.
with those tickets. Reported by jjfz123 / https://github.com/jjfz123 /
https://www.linkedin.com/in/jjfdzcastro1/