Added Security note (Advisory 2013-03) in ChangeLog

2026-10-05 16:37:24 +00:00 · 2013-06-19 11:50:30 +02:00
parent 1d419500b0
commit 016ea076e7
1 changed files with 4 additions and 0 deletions
@@ -31,6 +31,10 @@ Bugfix
   * Fixed bignum.c and bn_mul.h to support Thumb2 and LLVM compiler
   * Fixed values for 2-key Triple DES in cipher layer

+Security
+   * A possible DoS during the SSL Handshake, due to faulty parsing of
+     PEM-encoded certificates has been fixed (found by Jack Lloyd)
+
 = Version 1.2.7 released 2013-04-13
 Features
   * Ability to specify allowed ciphersuites based on the protocol version.