tocsin

Debian/mbedtls: medium 4.7

An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that can get precise enough side-channel measurements can recover the long-term ECDSA private key by (1) reco

Action: Upgrade mbedtls to 2.16.9-0.1 or later.

Affected

introducedfixedlast affected
02.16.9-0.1-

Fixed versions

2.16.9-0.1

Sources

published · modified · JSON