Skip to content

Commit bb7299e

Browse files
committed
Update RELEASES.md with similar text to the advisory.
1 parent 102420c commit bb7299e

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

RELEASES.md

+3-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,9 @@ Version 0.17.12 (2025-03-05)
33
Bug fix: https://github.com/briansmith/ring/pull/2447 for denial of service (DoS).
44

55
* Fixes a panic in `ring::aead::quic::HeaderProtectionKey::new_mask()` when
6-
integer overflow checking is enabled.
6+
integer overflow checking is enabled. In the QUIC protocol, an attacker can
7+
induce this panic by sending a specially-crafted packet. Even unintentionally
8+
it is likely to occur in 1 out of every 2**32 packets sent and/or received.
79

810
* Fixes a panic on 64-bit targets in `ring::aead::{AES_128_GCM, AES_256_GCM}`
911
when overflow checking is enabled, when encrypting/decrypting approximately

0 commit comments

Comments
 (0)