Updated Changelog

Signed-off-by: Minos Galanakis <[email protected]>
This commit is contained in:
Minos Galanakis
2026-03-05 14:20:15 +00:00
parent a397bb13a3
commit e54d769fe8
+6 -3
View File
@@ -1,3 +1,6 @@
Bugfix
* Add tag length validation in mbedtls_ccm_finish() to reject lengths
that are invalid or differ from the negotiated tag length.
Security
* Add tag length validation in mbedtls_ccm_finish() to prevent
out-of-bounds reads and mitigate potential application buffer
overflows where applications relied on the library to enforce
tag length constraints.