Skip to content

Commit 453fd05

Browse files
Changelog entry for security fix
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
1 parent 3b9f4be commit 453fd05

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

ChangeLog

+11
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,16 @@
11
Mbed TLS ChangeLog (Sorted per branch, date)
22

3+
= Mbed TLS 3.6.2 branch released 2024-10-14
4+
5+
Security
6+
* Fix a buffer underrun in mbedtls_pk_write_pubkey_der() when
7+
called on an opaque key, MBEDTLS_USE_PSA_CRYPTO is enabled,
8+
and the output buffer is smaller than the actual output.
9+
Fix a related buffer underrun in mbedtls_pk_write_pubkey_pem()
10+
when called on an opaque RSA key, MBEDTLS_USE_PSA_CRYPTO is enabled
11+
and MBEDTLS_MPI_MAX_SIZE is smaller than needed for a 4096-bit RSA key.
12+
CVE-2024-49195
13+
314
= Mbed TLS 3.6.1 branch released 2024-08-30
415

516
API changes

0 commit comments

Comments
 (0)