MbedTLS upgrade to 3.6.2 - Githubissues

OP-TEE / optee_os

Trusted side of the TEE

Other

1.6k stars 1.07k forks source link

MbedTLS upgrade to 3.6.2 #7133

Open ysbnim opened 3 days ago

ysbnim commented 3 days ago

Hi,

I'd like to upgrade MbedTLS upgrade to the latest version, 3.6.2 Because we found MbedTLS 3.6.0 has several CVEs as the follows :

CVE-2024-45159
CVE-2024-45158
CVE-2024-45157
CVE-2024-49195

Actually, To upgrade to 3.6.2, I already made the patch : https://github.com/ysbnim/optee_os/tree/import/mbedtls-3.6.2 by referring the PR https://github.com/OP-TEE/optee_os/pull/6797.

But there is no import/mbedtls-3.6.2 I can make a pull request of this.

Could you please help me create import/mbedtls-3.6.2 branch? Or please give me any opinions about this.

Thanks!

jenswi-linaro commented 3 days ago

Thanks for taking care of this. I've created the branch import/mbedtls-3.6.2.