mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-04-01 04:20:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Assemble ChangeLog

Browse Source 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
This commit is contained in:
David Horstmann 2024-10-11 19:41:59 +01:00
parent 019074fad6
commit ee649bc918
2 changed files with 12 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
ChangeLog
View File

@ -1,5 +1,17 @@
Mbed TLS ChangeLog (Sorted per branch, date) Mbed TLS ChangeLog (Sorted per branch, date)
= Mbed TLS x.x.x branch released xxxx-xx-xx
Security
* Fix a buffer overflow in mbedtls_pk_write_pubkey(),
mbedtls_pk_write_pubkey_der() and mbedtls_pk_write_key_der().
With MBEDTLS_USE_PSA_CRYPTO turned on, these functions would
write to a location before the start of the output buffer if it was less
than the size of the key being written and also less than
PK_MAX_EC_PUBLIC_KEY_SIZE (for EC public keys) and
PSA_EXPORT_KEY_PAIR_MAX_SIZE (for RSA private keys).
This buffer overflow only occurs for keys with the type MBEDTLS_PK_OPAQUE.
= Mbed TLS 3.6.1 branch released 2024-08-30 = Mbed TLS 3.6.1 branch released 2024-08-30
API changes API changes

9
ChangeLog.d/fix-pkwrite-buffer-overrun.txt
View File

@ -1,9 +0,0 @@
Security
* Fix a buffer overflow in mbedtls_pk_write_pubkey(),
mbedtls_pk_write_pubkey_der() and mbedtls_pk_write_key_der().
With MBEDTLS_USE_PSA_CRYPTO turned on, these functions would
write to a location before the start of the output buffer if it was less
than the size of the key being written and also less than
PK_MAX_EC_PUBLIC_KEY_SIZE (for EC public keys) and
PSA_EXPORT_KEY_PAIR_MAX_SIZE (for RSA private keys).
This buffer overflow only occurs for keys with the type MBEDTLS_PK_OPAQUE.