Files
buildroot/package/mbedtls
Peter Korsgaard e9edbee402 package/mbedtls: security bump to version 2.7.14
Fixes the following security issue:

- To avoid a side channel vulnerability when parsing an RSA private
  key, read all the CRT parameters from the DER structure rather than
  reconstructing them.

For more details, see the advisory:
https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.5-and-2.7.14-released

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-03-14 15:39:26 +01:00
..