diff options
| -rw-r--r-- | NEWS | 11 |
1 files changed, 9 insertions, 2 deletions
@@ -7,8 +7,15 @@ See the end for copying conditions. ** libgnutls: read the pin-value attribute if the p11-kit version allows it. -** libgnutls: Addressed invalid memory access in OpenPGP certificate parsing. - (issue found using oss-fuzz project) +** libgnutls: Addressed integer overflow resulting to invalid memory write + in OpenPGP certificate parsing. Issue found using oss-fuzz project: + https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420 + +** libgnutls: Addressed crashes in OpenPGP certificate parsing, related + to private key parser. No longer allow OpenPGP certificates (public keys) + to contain private key sub-packets. Issue found using oss-fuzz project: + https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=354 + https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=360 ** API and ABI modifications: No changes since last version. |