Merge remote-tracking branch 'upstream-restricted/pr/398' into development-restricted-proposed

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 439f1a8..1b5659a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -49,6 +49,8 @@
    * Fix memory allocation corner cases in memory_buffer_alloc.c module. Found
      by Guido Vranken. #639
    * Log correct number of ciphersuites used in Client Hello message. #918
+   * Fix X509 CRT parsing that would potentially accept an invalid tag when
+     parsing the subject alternative names.
 
 Changes
    * Fix tag lengths and value ranges in the documentation of CCM encryption.