1
0
mirror of https://github.com/ARMmbed/mbedtls.git synced 2025-06-12 01:29:52 +08:00

Add changelog entry for TLS 1.2 Finished fix

Signed-off-by: David Horstmann <david.horstmann@arm.com>
This commit is contained in:
David Horstmann 2025-03-11 15:52:48 +00:00
parent 816b712680
commit 5ea94e6cd1

View File

@ -0,0 +1,6 @@
Security
* Fix a vulnerability in the TLS 1.2 handshake. If memory allocation failed
or there was a cryptographic hardware failure when calculating the
Finished message, it could be calculated incorrectly. This would break
the security guarantees of the TLS handshake.
CVE-2025-27810