commit 55bea65ca913bca5dee772668421888568b6b62e
author k-stachowiak <krzysiek.stachowiak@gmail.com> Mon Jul 16 12:14:18 2018 +0200
committer k-stachowiak <krzysiek.stachowiak@gmail.com> Mon Jul 16 12:30:48 2018 +0200
tree d5602481bd27f180b04c501af47363b32582ad22
parent 6978949cd090a6301466fdc709b1830429254053

Update change log

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 9ea55e1..ce3554c 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,6 +2,12 @@
 
 = mbed TLS x.x.x branch released xxxx-xx-xx
 
+Security
+   * Fix an issue in the X.509 module which could lead to a buffer overread
+     during certificate extensions parsing. In case of receiving malformed
+     input (extensions length field equal to 0), an illegal read of one byte
+     beyond the input buffer is made. Found and analyzed by Nathan Crandall.
+
 Bugfix
    * Fix compilation error on C++, because of a variable named new.
      Found and fixed by Hirotaka Niisato in #1783.