mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-10-11 03:17:24 +00:00
Update ChangeLog to add CVE
Co-authored-by: Gilles Peskine <[email protected]> Signed-off-by: Ben Taylor <[email protected]>
This commit is contained in:
committed by
Ben Taylor
co-authored by
Gilles Peskine
parent
62d3b1ecc0
commit
3e6608a5b6
@@ -4,7 +4,7 @@ Security
|
||||
handshake to fail. This could allow a handshake to continue with a master
|
||||
secret that was not correctly bound to the handshake transcript,
|
||||
undermining the security guarantees of the extended master secret
|
||||
extension. Report by Mathew Gretton-Dann.
|
||||
extension. Report by Mathew Gretton-Dann. CVE-2026-50581
|
||||
* Fix a TLS 1.3 server-side error-handling bug affecting session ticket
|
||||
generation. Under rare conditions, such as memory allocation failures
|
||||
while computing the resumption master secret, the server could issue
|
||||
|
||||
Reference in New Issue
Block a user