Fix potential integer overflow parsing DER CRT
This patch prevents a potential signed integer overflow during the
certificate version verification checks.
diff --git a/ChangeLog b/ChangeLog
index 2149ff2..62ef470 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -131,6 +131,9 @@
digits. Found and fixed by Guido Vranken.
* Fix unlisted DES configuration dependency in some pkparse test cases. Found
by inestlerode. #555
+ * Fix a potential integer overflow in the version verification for DER
+ encoded X509 certificates. The overflow would enable maliciously
+ constructed certificates to bypass the certificate verification check.
= mbed TLS 2.1.6 branch released 2016-10-17