lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-11-05 08:10:38 +03:00
Code Activity

Merge pull request #3014 from mpg/fix-attribution-ecdsa-inc

Browse Source 
[2.16] Fix contributor names in ChangeLog
This commit is contained in:
Janos Follath
2020-01-29 14:07:17 +00:00
committed by GitHub
parent 7550e857bf 58c27790de
commit 1f10f2e282
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ChangeLog
View File

@@ -6,15 +6,13 @@ Bugfix
* Allow loading symlinked certificates. Fixes #3005. Reported and fixed
by Jonathan Bennett <JBennett@incomsystems.biz> via #3008.
= mbed TLS 2.16.5 branch released xxxx-xx-xx
Security
* Fix potential memory overread when performing an ECDSA signature
operation. The overread only happens with cryptographically low
probability (of the order of 2^-n where n is the bitsize of the curve)
unless the RNG is broken, and could result in information disclosure or
denial of service (application crash or extra resource consumption).
Reported by Peter and Auke (found using static analysis).
Found by Auke Zeilstra and Peter Schwabe, using static analysis.
= mbed TLS 2.16.4 branch released 2020-01-15