commit 08f06eb0499da2a9fb2b14f316dfbec5fd052e1b
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Wed Feb 19 09:31:38 2020 +0100
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Wed Feb 19 09:33:33 2020 +0100
tree 8a579aa305d2fd5a53619b2f5e677625111d0e04
parent 609d79ed8e0ca56511a54a95d6d61a631d396f7d

Add ChangeLog entries for pk_parse_key() fixes

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 4fe9c94..28467be 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -11,6 +11,11 @@
 
 Bugfix
    * Fix an unchecked call to mbedtls_md() in the x509write module.
+   * Fix a bug in mbedtls_pk_parse_key() that would cause it to accept some
+     RSA keys that would later be rejected by functions expecting private
+     keys. Found by Catena cyber using oss-fuzz (issue 20467).
+   * Fix a bug in mbedtls_pk_parse_key() that would cause it to accept some
+     RSA keys with invalid values by silently fixing those values.
 
 = mbed TLS 2.7.13 branch released 2020-01-15