diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2015-04-25 21:24:17 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2015-04-25 21:24:17 +0200 |
| commit | d9c4ce676d140a63ae0ebd719d67e85ea13eea6b (patch) | |
| tree | 5e02bfd942f2a2bd64c145f9e3aa47c80ea745d9 | |
| parent | 3d333e59621f6cf9381c846c405b23d79020d031 (diff) | |
| download | gnutls-d9c4ce676d140a63ae0ebd719d67e85ea13eea6b.tar.gz | |
doc update
| -rw-r--r-- | NEWS | 5 |
1 files changed, 4 insertions, 1 deletions
@@ -8,7 +8,10 @@ See the end for copying conditions. ** libgnutls: gnutls_certificate_get_ours: will return the certificate even if a callback was used to send it. -** Check for invalid length in the X.509 version field. Without the check +** libgnutls: Fix for MD5 downgrade in TLS 1.2 signatures. Reported by +Karthikeyan Bhargavan. + +** libgnutls: Check for invalid length in the X.509 version field. Without the check certificates with invalid length would be detected as having an arbitrary version. Reported by Hanno Böck. |