Name of the Vulnerable Software and Affected Versions mbedtls versions 2.28.3 through 2.28.6

Description The issue concerns a buffer overread in TLS stream cipher suites, a timing side channel in private key RSA operations, and a buffer overflow in mbedtls x509 set extension.

Recommendations For mbedtls versions 2.28.3 through 2.28.6, update to version 2.28.7 to fix the security vulnerabilities.