mirror of
https://github.com/yuzu-mirror/mbedtls.git
synced 2026-04-20 22:05:15 +00:00
32a38dfec5
The issue was fixed while adding support for static ECDH with Opaque keys: https://github.com/Mbed-TLS/mbedtls/pull/5624 This is just adding the ChangeLog entry for that fix. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
7 lines
339 B
Text
7 lines
339 B
Text
Security
|
|
* Fix a potential heap buffer overread in TLS 1.2 server-side when
|
|
MBEDTLS_USE_PSA_CRYPTO is enabled, an opaque key (created with
|
|
mbedtls_pk_setup_opaque()) is provisioned, and a static ECDH ciphersuite
|
|
is selected. This may result in an application crash. No path to
|
|
information leak has been identified.
|
|
|