Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-21 09:37:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

changelog: add reset for some fields of the SSL context structure

Browse Source 
Signed-off-by: Valerio Setti <[email protected]>
This commit is contained in:
Valerio Setti
2026-06-25 14:01:15 +02:00
parent 2c33afacd5
commit 890c8a1d69
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/security1585.txt
+6
View File
@@ -0,0 +1,6 @@
Security
* Ensure 'dtls_srtp_info' field from 'mbedtls_ssl_context'
is properly zeroized when mbedtls_ssl_session_reset() is called. This
could cause incorrect DTLS-SRTP parameter inheritance for applications
reusing an SSL context.
Reported by jjfz123. CVE-2026-50585.