From 83ae22dbbdf75e55bd9b57f366e29855c39e7453 Mon Sep 17 00:00:00 2001 From: Paul Elliott Date: Fri, 11 Aug 2023 16:46:15 +0100 Subject: [PATCH] Add Changelog entry Signed-off-by: Paul Elliott --- ChangeLog.d/fix-tls-padbuf-zeroization | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 ChangeLog.d/fix-tls-padbuf-zeroization diff --git a/ChangeLog.d/fix-tls-padbuf-zeroization b/ChangeLog.d/fix-tls-padbuf-zeroization new file mode 100644 index 000000000..36451cb4b --- /dev/null +++ b/ChangeLog.d/fix-tls-padbuf-zeroization @@ -0,0 +1,4 @@ +Security + * Fix a case where potentially sensitive information held in memory would not + be completely zeroized during TLS 1.2 handshake, in both server and client + configurations.