michaelh/zephyr
1
0
Fork 0
Code Releases Activity

doc: releases: Add CVE-2019-9506 to release notes

Browse source 
Add section about security vulnerability issues in the 2.0.0 release
notes.

Signed-off-by: David Brown <david.brown@linaro.org>
This commit is contained in:
David Brown 2019-09-03 16:28:42 -06:00 • committed by Ioannis Glaropoulos
commit f14e024c39
1 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
doc/releases/release-notes-2.0.rst
View file

@ -23,6 +23,19 @@ Major enhancements with this release include:
The following sections provide detailed lists of changes by component.
Security Vulnerability Related
******************************
The following security vulnerability (CVE) was addressed in this
release:
* Fixes CVE-2019-9506: The Bluetooth BR/EDR specification up to and
including version 5.1 permits sufficiently low encryption key length
and does not prevent an attacker from influencing the key length
negotiation. This allows practical brute-force attacks (aka "KNOB")
that can decrypt traffic and inject arbitrary ciphertext without the
victim noticing.
Kernel
******