From 2e5318ecf60a3e19cb09ed7b1ff9decd4d09c507 Mon Sep 17 00:00:00 2001 From: Simon Butcher Date: Tue, 7 Mar 2017 12:46:05 +0000 Subject: [PATCH 1/2] Corrected attibution in Changelog --- ChangeLog | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 1ff98d9ce..c2221a530 100644 --- a/ChangeLog +++ b/ChangeLog @@ -17,7 +17,8 @@ Security when verifying the validity of a key on secp224k1. This could be triggered remotely for example with a maliciously constructed certificate and potentially could lead to remote code execution on some platforms. - Reported independently by rongsaws and Regina Wilson. #569 CVE-2017-2784 + Reported independently by rongsaws and Aleksandar Nikolic, Cisco Talos + team. #569 CVE-2017-2784 Bugfix * Fix output certificate verification flags set by x509_crt_verify_top() when From a42044d98bf8fc20ac64a7391b8134ec3333b5ca Mon Sep 17 00:00:00 2001 From: Simon Butcher Date: Tue, 7 Mar 2017 19:35:49 +0000 Subject: [PATCH 2/2] Added missing credit to ChangeLog for #555 --- ChangeLog | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ChangeLog b/ChangeLog index c2221a530..f92aef212 100644 --- a/ChangeLog +++ b/ChangeLog @@ -50,6 +50,8 @@ Bugfix * Fix 1 byte buffer overflow in mpi_write_string() when the MPI number to write in hexadecimal is negative and requires an odd number of digits. Found and fixed by Guido Vranken. + * Fix unlisted DES configuration dependency in some pkparse test cases. Found + by inestlerode. #555 = mbed TLS 1.3.18 branch 2016-10-17