Merge fix for IOTSSL-480 - base64 overflow issue

This commit is contained in:
Simon Butcher
2015-10-05 09:54:11 +01:00
4 changed files with 48 additions and 25 deletions

View File

@@ -29,6 +29,13 @@ Changes
= mbed TLS 2.1.1 released 2015-09-17
Security
* Fix possible heap buffer overflow in base64_encoded() when the input
buffer is 512MB or larger on 32-bit platforms.
Found by Guido Vranken. Not trigerrable remotely in TLS.
= mbed TLS 2.1.1 released 2015-09-17
Security
* Add countermeasure against Lenstra's RSA-CRT attack for PKCS#1 v1.5
signatures. (Found by Florian Weimer, Red Hat.)