AVG-1141 log
| Package | mbedtls |
| Status | Fixed |
| Severity | Medium |
| Type | private key recovery |
| Affected | 2.16.5-1 |
| Fixed | 2.16.7-1 |
| Current | 3.6.1-1 [extra] |
| Ticket | None |
| Created | Wed Apr 22 13:32:56 2020 |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2020-10932 | Medium | No | Private key recovery | A side channel attack has been found on the ECDSA implementation of Mbed TLS before 2.22.0, 2.16.6 and 2.7.15, allowing a local attacker with access to... |
| Date | Advisory | Package | Type |
|---|---|---|---|
| 31 Jul 2020 | ASA-202007-5 | mbedtls | private key recovery |
| References |
|---|
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-04 |