Add change log

Signed-off-by: Ronald Cron <[email protected]>
2026-11-12 18:50:39 +00:00 · 2026-06-24 16:00:25 +02:00
parent 0501eeb804
commit c4db00209a
1 changed files with 7 additions and 0 deletions
@@ -0,0 +1,7 @@
+Security
+   * Fixed a TLS 1.3 record-boundary validation issue that could allow
+     unauthenticated plaintext data to be processed across a key change. In
+     servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a
+     man-in-the-middle attacker to cause loss of 0-RTT early data.
+     Reported by Ben Smyth.
+     CVE-2026-TODO.