tocsin

Alpine/mbedtls: critical 9.8

ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap co

Action: Upgrade mbedtls to 2.7.0-r0 or later.

Affected

introducedfixedlast affected
02.7.0-r0-

Fixed versions

2.7.0-r0

Sources

published · modified · JSON