New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

MbedTLS upgrade to 3.6.2 #7133

Closed

ysbnim opened this issue Nov 19, 2024 · 1 comment

Contributor

ysbnim commented Nov 19, 2024 •

edited

Loading

Hi,

I'd like to upgrade MbedTLS upgrade to the latest version, 3.6.2
Because we found MbedTLS 3.6.0 has several CVEs as the follows :

Actually, To upgrade to 3.6.2, I already made the patch : https://github.com/ysbnim/optee_os/tree/import/mbedtls-3.6.2
by referring the PR #6797.

But there is no import/mbedtls-3.6.2 I can make a pull request of this.

Could you please help me create import/mbedtls-3.6.2 branch?
Or please give me any opinions about this.

Thanks!

Contributor

jenswi-linaro commented Nov 19, 2024

Thanks for taking care of this. I've created the branch import/mbedtls-3.6.2.

ysbnim mentioned this issue

Import/mbedtls 3.6.2 #7135

Merged

ysbnim closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment