From c0213a91abe4419743cd81bac4bd9a4d5bd03608 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Wed, 22 Jan 2020 19:04:19 +0100 Subject: [PATCH] Add changelog entry for the unchecked mbedtls_md call --- ChangeLog | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/ChangeLog b/ChangeLog index edd89f6ef..79f596d0a 100644 --- a/ChangeLog +++ b/ChangeLog @@ -65,6 +65,11 @@ Changes = mbed TLS 2.16.x branch released xxxx-xx-xx +Bugfix + * Fix an unchecked call to mbedtls_md() in the x509write module. + += mbed TLS 2.16.4 branch released 2020-01-15 + Security * Fix side channel vulnerability in ECDSA. Our bignum implementation is not constant time/constant trace, so side channel attacks can retrieve the