From 54150a36d13ddbdaa51482f1679b776ace580c54 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Manuel=20P=C3=A9gouri=C3=A9-Gonnard?= Date: Fri, 30 Oct 2015 09:35:03 +0100 Subject: [PATCH] Add Changelog entries for this branch --- ChangeLog | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/ChangeLog b/ChangeLog index 593e7519aa..f440011e5e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -2,7 +2,15 @@ mbed TLS ChangeLog (Sorted per branch, date) = mbed TLS 1.3.15 released 2015-10-xx +Security + * The X509 max_pathlen constraint was not enforced on intermediate + certificates. Found by Nicholas Wilson, fix and tests provided by + Janos Follath. #280 and #319 + Bugfix + * Self-signed certificates were not excluded from pathlen counting, + resulting in some valid X.509 being incorrectly rejected. Found and fix + provided by Janos Follath. #319 * Fix bug causing some handshakes to fail due to some non-fatal alerts not begin properly ignored. Found by mancha and Kasom Koht-arsa, #308 * Fix build error with configurations where ECDHE-PSK is the only key