LTS_07_2020_Ref02
Package versions:
Apt/Debian:
azure-iot-sdk-c - 0.2.0.0-29xenial
azure-iot-sdk-c - 0.2.0.0-22bionic
This release contains a security fix affecting applications using c-utility in conjunction with OpenSSL or WolfSSL.
- TLS hostname validation fix for OpenSSL and WolfSSL. CVE-2020-17002
Additional fixes:
C Device SDK
- Code version: 1.4.1
- Fix for memory leak in _GetTwinAsync (gh issue #1478)
- Fix for memory leak if destroying device client right after sending Twin reported property update
- Fix sending get twin requests only after the response topic suback is received (#1585)
- Fix Heap Buffer Overflow when sending message with Property (#1618)
- Fix for lack of throttling on registration request of DPS client
- Fix mqtt disconnect bug (#1696)
C Shared Utility
- [mbedtls] Adding support to send larger payload (#421)
- [tlsio_mbedtls] Fix memory leak (#422, #475)
- Fixing socket state when DNS resolution failed. (#437)
- Fix potential buffer overflow in crypto library
- Fix retry bug in tlsio_wolfssl
- Add check for overflow for BUFFER_prepend (#467)
- Sdl bug fix (#465)
- Fix for using correct wolfssl api in httpapi (#471)
- Add ecc support in httpapi_compact
- Fix for #1624 iOS 14 send temeletry fix (#477)