Please read this before reporting a bug:
http://wiki.archlinux.org/index.php/Reporting_Bug_Guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

Task Type Bug Report Category Security Status Closed Assigned To Kyle Keen (keenerd) Levente Polyak (anthraxx) Architecture All Severity High Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 0 Private No

Details Summary ======= The package mbedtls is vulnerable to private key recovery via CVE-2020-16150. Guidance ======== Upgrading to the latest version 2.25.0 or at least to 2.16.8 fixes the issue. References ========== https://security.archlinux.org/AVG-1386 https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-1

Closed by  Jonas Witschel (diabonas)
Tuesday, 05 January 2021, 11:04 GMT
Reason for closing:  Fixed
Additional comments about closing:  mbedtls 2.25.0-1