Skip to content

mbedTLS: Buffer overflow security issue, requires upgrade to 2.7.0 #6025

@pfalcon

Description

@pfalcon

There is a pretty obvious, blatant buffer overflow possibility in the mbedTLS codebase (2.6.0) used by Zephyr as of now. It was fixed in 2.7.0 by this commit: Mbed-TLS/mbedtls@0b7b83fd9 .

In the interest of establishing Zephyr as the secure codebase, we should upgrade included mbedTLS for the 1.11 release.

Metadata

Metadata

Assignees

Labels

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions