mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-05-03 16:50:18 +02:00
9 lines
481 B
Plaintext
9 lines
481 B
Plaintext
Security
|
|
* The documentation of mbedtls_ssl_session_save(),
|
|
mbedtls_ssl_session_load(), mbedtls_ssl_context_save(), and
|
|
mbedtls_ssl_context_load() has been updated to clarify the responsibility
|
|
of the application to preserve the confidentiality and integrity of
|
|
serialized data, mitigating the risk of misuse of these APIs.
|
|
Credit to Haruto Kimura (Stella) and Eva Crystal (0xiviel) for
|
|
highlighting risks associated with tampered serialized data.
|