Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-15 14:49:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1534 from Mbed-TLS/release/changelog_fixes_4.1.0

Browse Source 
[Release] Added attributions & CVE to ChangeLogs
This commit is contained in:
minosgalanakis
2026-03-26 17:38:50 +00:00
committed by GitHub
parent 5baf6883c6 feb0dd04ba
commit fc317141fe
3 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/context_load_and_session_load_documentation.txt
+2 -2
View File
@@ -4,5 +4,5 @@ Security
mbedtls_ssl_context_load() has been updated to clarify the responsibility mbedtls_ssl_context_load() has been updated to clarify the responsibility
of the application to preserve the confidentiality and integrity of of the application to preserve the confidentiality and integrity of
serialized data, mitigating the risk of misuse of these APIs. serialized data, mitigating the risk of misuse of these APIs.
Credit to Haruto Kimura (Stella) for highlighting risks associated with Credit to Haruto Kimura (Stella) and Eva Crystal (0xiviel) for
tampered serialized data. highlighting risks associated with tampered serialized data.
ChangeLog.d/fix-null-pointer-dereference.txt
+2 -1
View File
@@ -1,4 +1,5 @@
Security Security
* Fix a NULL pointer dereference in mbedtls_x509_string_to_names() when * Fix a NULL pointer dereference in mbedtls_x509_string_to_names() when
mbedtls_calloc() fails to allocate memory. This was caused by failing to mbedtls_calloc() fails to allocate memory. This was caused by failing to
check whether mbedtls_calloc() returned NULL. check whether mbedtls_calloc() returned NULL. Found and reported by
Haruto Kimura (Stella).
ChangeLog.d/inet_pton.txt
+1 -1
View File
@@ -2,4 +2,4 @@ Security
* Fix a limited buffer underflow in x509_inet_pton_ipv6(). In rare cases * Fix a limited buffer underflow in x509_inet_pton_ipv6(). In rare cases
(e.g. on platforms with memory protection when the overread crosses page (e.g. on platforms with memory protection when the overread crosses page
boundary) this could lead to DoS. Found and reported by Haruto Kimura boundary) this could lead to DoS. Found and reported by Haruto Kimura
(Stella). (Stella). CVE-2026-25833