In TLS 1.2, only servers are affected
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
diff --git a/ChangeLog.d/xxx_psa_peerkey.txt b/ChangeLog.d/xxx_psa_peerkey.txt
index 1ba1510..d25e4ec 100644
--- a/ChangeLog.d/xxx_psa_peerkey.txt
+++ b/ChangeLog.d/xxx_psa_peerkey.txt
@@ -1,6 +1,8 @@
Security
* Fix a remotely exploitable heap buffer overflow in TLS handshake parsing.
- In TLS 1.3, all configurations are affected except PSK-only ones.
+ In TLS 1.3, all configurations are affected except PSK-only ones, and
+ both clients and servers are affected.
In TLS 1.2, the affected configurations are those with
- MBEDTLS_USE_PSA_CRYPTO and ECDH enabled but DHM and RSA disabled.
+ MBEDTLS_USE_PSA_CRYPTO and ECDH enabled but DHM and RSA disabled,
+ and only servers are affected, not clients.
Credit to OSS-Fuzz.