Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-10-06 00:47:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1686 from minosgalanakis/security/mlfbyt4c_tls13_policy_bypass_changelog_4.1

Browse Source 
Add Attribution CVE mbedtls:mbedtls4.1-restricted
This commit is contained in:
Ronald Cron
2026-06-25 15:57:24 +02:00
committed by GitHub
parent f885248356 1d3ac2843c
commit 316296466b
2 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/security-issue1569.txt
+4 -1
View File
@@ -1,4 +1,7 @@
Security
* Improved documentation of mbedtls_ssl_conf_sig_algs() to emphasize that
this function only sets signature algorithms that are enforced during
TLS key exchange and not on certificate verification.
TLS key exchange and not on certificate verification. Reported by
Xiangdong Li, Beijing University of Posts and Telecommunications (BUPT).
CVE-2026-54441
ChangeLog.d/tls13-hrr-selected-group.txt
+4 -2
View File
@@ -1,5 +1,7 @@
Security
* Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected group was
not advertised in the original ClientHello. Reported by
not advertised in the original ClientHello. Reported independently by
Din Asotić / Xiangdong Li, Beijing University of Posts and
Telecommunications (BUPT)
Telecommunications (BUPT), and NVIDIA Project Vanessa.
CVE-2026-25832.