Adapt ChangeLog

This commit is contained in:
Hanno Becker 2018-01-17 17:45:31 +00:00
parent 1cc67a0d0e
commit 4ecd34f86c

View File

@ -20,6 +20,11 @@ Features
heavily-loaded machine. heavily-loaded machine.
Bugfix Bugfix
* Properly initialize and free SHA-256 / SHA-512 context in entropy module
instead of performing zeroization only. This could lead to failure for
alternative implementations of SHA-256 / SHA-512 for which zeroization
of contexts is not a proper way of initialization.
Found and fix suggested by ccli8.
* Fix ssl_parse_record_header() to silently discard invalid DTLS records * Fix ssl_parse_record_header() to silently discard invalid DTLS records
as recommended in RFC 6347 Section 4.1.2.7. as recommended in RFC 6347 Section 4.1.2.7.
* Fix memory leak in mbedtls_ssl_set_hostname() when called multiple times. * Fix memory leak in mbedtls_ssl_set_hostname() when called multiple times.