diff --git a/ChangeLog b/ChangeLog index 1c8314bcf..7f2b033c9 100644 --- a/ChangeLog +++ b/ChangeLog @@ -6,8 +6,10 @@ Security * Fix potential integer overflow to buffer overflow in mbedtls_rsa_rsaes_pkcs1_v15_encrypt and mbedtls_rsa_rsaes_oaep_encrypt (not triggerable remotely in (D)TLS). - * Fix missing padding length check in mbedtls_rsa_rsaes_pkcs1_v15_decrypt + * Fix missing padding length check in mbedtls_rsa_rsaes_pkcs1_v15_decrypt required by PKCS1 v2.2 + * Fix potential integer overflow to buffer overflow in + mbedtls_rsa_rsaes_pkcs1_v15_encrypt and mbedtls_rsa_rsaes_oaep_encrypt Bugfix * Fix bug in mbedtls_mpi_add_mpi() that caused wrong results when the three