Files
mbedtls/ChangeLog.d/serialized-data-load-hardening.txt
2026-05-19 14:15:01 +03:00

6 lines
281 B
Plaintext

Bugfix
* Reject malformed TLS 1.3 serialized sessions instead of accepting
unterminated strings or extra trailing data.
* Reject serialized SSL contexts whose DTLS Connection ID length exceeds
the maximum supported size, instead of overflowing the internal buffer.