commit cc3f987c4f66ebceba518d40b0e0f92c86de23f8
author Minos Galanakis <minos.galanakis@arm.com> Mon Sep 29 10:58:51 2025 +0100
committer Minos Galanakis <minos.galanakis@arm.com> Mon Sep 29 11:34:24 2025 +0100
tree e0603949e0322bd6bd2c0cc7dd391e0d96086dea
parent 9364208e330c195fb1fff659155ba4024ead4973

Changelogs: Added CVEs

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>

ChangeLog.d/fix-string-to-names-memory-management.txt

diff --git a/ChangeLog.d/fix-string-to-names-memory-management.txt b/ChangeLog.d/fix-string-to-names-memory-management.txt
index 87bc596..6b744a7 100644
--- a/ChangeLog.d/fix-string-to-names-memory-management.txt
+++ b/ChangeLog.d/fix-string-to-names-memory-management.txt
@@ -10,6 +10,7 @@
      were affected (use-after-free if the san string contains more than one DN).
      Code that does not call mbedtls_string_to_names() directly is not affected.
      Found by Linh Le and Ngan Nguyen from Calif.
+     CVE-2025-47917
 
 Changes
    * The function mbedtls_x509_string_to_names() now requires its head argument