Corrected attibution in Changelog
@@ -15,7 +15,8 @@ Security
when verifying the validity of a key on secp224k1. This could be
triggered remotely for example with a maliciously constructed certificate
and potentially could lead to remote code execution on some platforms.
- Reported independently by rongsaws and Regina Wilson. #569 CVE-2017-2784
+ Reported independently by rongsaws and Aleksandar Nikolic, Cisco Talos
+ team. #569 CVE-2017-2784
Bugfix
* Fix output certificate verification flags set by x509_crt_verify_top() when
