Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-13 13:49:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10942 from ronald-cron-arm/cve_id_issue_1618

Browse Source 
Add CVE-2026-73096 ID in ChangeLog
This commit is contained in:
David Horstmann
2026-09-03 11:02:29 +00:00
committed by GitHub
parent f06454cd7b 5cb95431c4
commit e3d5ae00cc
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog
+1 -1
View File
@@ -30,7 +30,7 @@ Security
unauthenticated plaintext data to be processed across a key change. In unauthenticated plaintext data to be processed across a key change. In
servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a
man-in-the-middle attacker to cause loss of 0-RTT early data. man-in-the-middle attacker to cause loss of 0-RTT early data.
Reported by Ben Smyth. Reported by Ben Smyth. CVE-2026-73096
* Fix a remote buffer overflow in (D)TLS with ECDHE-PSK cipher suites when * Fix a remote buffer overflow in (D)TLS with ECDHE-PSK cipher suites when
CBC is disabled. Reported by Karnakar Reddy. CVE-2026-50580 CBC is disabled. Reported by Karnakar Reddy. CVE-2026-50580
* Fix a potential information disclosure in TLS 1.2 servers using session * Fix a potential information disclosure in TLS 1.2 servers using session