yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-26 15:25:43 +01:00
Code Issues Packages Projects Releases Wiki Activity

Clarify ChangeLog for #569

Browse Source
This commit is contained in:
Simon Butcher 2017-02-28 18:47:27 +00:00
parent 8dbb35ae13
commit 3ea1af214c
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog
View File

@ -16,9 +16,8 @@ Security
* Fixed a bug that caused freeing a buffer that was allocated on the stack, * Fixed a bug that caused freeing a buffer that was allocated on the stack,
when verifying the validity of a key on secp224k1. This could be when verifying the validity of a key on secp224k1. This could be
triggered remotely for example with a maliciously constructed certificate triggered remotely for example with a maliciously constructed certificate
and might have led to remote code execution on some exotic embedded and potentially could lead to remote code execution on some platforms.
platforms. Reported independently by rongsaws and Regina Wilson. Reported independently by rongsaws and Regina Wilson. #569 CVE-2017-2784
CVE-2017-2784
Bugfix Bugfix
* Fix output certificate verification flags set by x509_crt_verify_top() when * Fix output certificate verification flags set by x509_crt_verify_top() when