yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-23 04:45:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix location of ChangeLog entry

Browse Source 
This one was meant to be in the security section, must have been moved while
resolving a merge conflict.
This commit is contained in:
Manuel Pégourié-Gonnard 2017-06-08 20:42:33 +02:00
parent e0cb1cd68b
commit 89306daef5
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog
View File

@ -8,6 +8,9 @@ Security
https://arxiv.org/abs/1702.08719v2. https://arxiv.org/abs/1702.08719v2.
Found and fix proposed by Michael Schwarz, Samuel Weiser, Daniel Gruss, Found and fix proposed by Michael Schwarz, Samuel Weiser, Daniel Gruss,
Clémentine Maurice and Stefan Mangard. Clémentine Maurice and Stefan Mangard.
* Wipe stack buffers in RSA private key operations
(rsa_rsaes_pkcs1_v15_decrypt(), rsa_rsaes_oaep_decrypt).
Found by Laurent Simon.
* Tighten ASN.1 parsing of RSA PKCS#1 v1.5 signatures, to avoid a * Tighten ASN.1 parsing of RSA PKCS#1 v1.5 signatures, to avoid a
potential Bleichenbacher-style attack. potential Bleichenbacher-style attack.
* Tighten parsing of RSA PKCS#1 v1.5 signatures, to avoid a * Tighten parsing of RSA PKCS#1 v1.5 signatures, to avoid a
@ -16,9 +19,6 @@ Security
Bugfix Bugfix
* Fix insufficient support for signature-hash-algorithm extension, * Fix insufficient support for signature-hash-algorithm extension,
resulting in compatibility problems with Chrome. Found by hfloyrd. #823 resulting in compatibility problems with Chrome. Found by hfloyrd. #823
* Wipe stack buffers in RSA private key operations
(rsa_rsaes_pkcs1_v15_decrypt(), rsa_rsaes_oaep_decrypt).
Found by Laurent Simon.
* Accept empty trusted CA chain in authentication mode * Accept empty trusted CA chain in authentication mode
SSL_VERIFY_OPTIONAL. Fixes #864. Found by jethrogb. SSL_VERIFY_OPTIONAL. Fixes #864. Found by jethrogb.
* Fix implementation of ssl_parse_certificate * Fix implementation of ssl_parse_certificate