mirror of
https://github.com/zephyrproject-rtos/zephyr
synced 2025-09-02 09:12:44 +00:00
b9bc24c8dd
Due to a security advisory released on August 28th 2017[1], it's advisable to update mbedTLS to 2.6.0. The vulnerability, identified as CVE-2017-14032, allows bypassing the authentication of a peer when the authentication mode is configured as optional (the default is secure, but applications might change the setting.) tests/crypto/mbedtls is passing. [1] https://goo.gl/s4imN6 Signed-off-by: Leandro Pereira <leandro.pereira@intel.com> |
||
|---|---|---|
| .. | ||
| mbedtls | ||
| tinycrypt | ||
| Kconfig | ||
| Makefile | ||