Alpine/mbedtls: medium 4.7
An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that can get precise enough side-channel measurements can recover the long-term ECDSA private key by (1) reco
Action: Upgrade mbedtls to 2.16.6-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.16.6-r0 | - |
Fixed versions
| 2.16.6-r0 |
Sources
- osv: ALPINE-CVE-2020-10932#Alpine:v3.23/mbedtls
- https://security.alpinelinux.org/vuln/CVE-2020-10932
published · modified · JSON