mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-04-13 15:42:26 +02:00
Extended attributions & CVE
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
This commit is contained in:
@@ -4,5 +4,5 @@ Security
|
||||
mbedtls_ssl_context_load() has been updated to clarify the responsibility
|
||||
of the application to preserve the confidentiality and integrity of
|
||||
serialized data, mitigating the risk of misuse of these APIs.
|
||||
Credit to Haruto Kimura (Stella) for highlighting risks associated with
|
||||
tampered serialized data.
|
||||
Credit to Haruto Kimura (Stella) and Eva Crystal (0xiviel) for
|
||||
highlighting risks associated with tampered serialized data.
|
||||
|
||||
@@ -2,5 +2,4 @@ Security
|
||||
* Fix a limited buffer underflow in x509_inet_pton_ipv6(). In rare cases
|
||||
(e.g. on platforms with memory protection when the overread crosses page
|
||||
boundary) this could lead to DoS. Found and reported by Haruto Kimura
|
||||
(Stella).
|
||||
CVE-2026-25833
|
||||
(Stella). CVE-2026-25833
|
||||
|
||||
Reference in New Issue
Block a user