mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-11-25 15:55:37 +01:00
Add changelog entry
This commit is contained in:
parent
b10fd065be
commit
216c44d6eb
@ -14,6 +14,11 @@ Security
|
||||
unless the RNG is broken, and could result in information disclosure or
|
||||
denial of service (application crash or extra resource consumption).
|
||||
Found by Auke Zeilstra and Peter Schwabe, using static analysis.
|
||||
* To avoid a side channel vulnerability when parsing an RSA private key,
|
||||
read all the CRT parameters from the DER structure rather than
|
||||
reconstructing them. Found by Alejandro Cabrera Aldaya and Billy Bob
|
||||
Brumley. Reported and fix contributed by Jack Lloyd.
|
||||
ARMmbed/mbed-crypto#352
|
||||
|
||||
Bugfix
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user