mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-10-20 15:47:57 +00:00
ChangeLog: Removed todo placeholder for CVE
Signed-off-by: Minos Galanakis <[email protected]>
This commit is contained in:
@@ -42,7 +42,6 @@ Security
|
|||||||
servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a
|
servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a
|
||||||
man-in-the-middle attacker to cause loss of 0-RTT early data.
|
man-in-the-middle attacker to cause loss of 0-RTT early data.
|
||||||
Reported by Ben Smyth.
|
Reported by Ben Smyth.
|
||||||
CVE-2026-TODO.
|
|
||||||
* Fix a possible buffer overflow in mbedtls_ecdh_calc_secret(): when the
|
* Fix a possible buffer overflow in mbedtls_ecdh_calc_secret(): when the
|
||||||
provided output buffer is too small, sometimes (depending on the value of
|
provided output buffer is too small, sometimes (depending on the value of
|
||||||
the computed shared secret), the function would not return an error as it
|
the computed shared secret), the function would not return an error as it
|
||||||
|
|||||||
Reference in New Issue
Block a user