Hi Innocenti,

The official list of defects is available on github:

https://github.com/ARMmbed/mbedtls/issues?q=is%3Aissue+is%3Aopen+label%3Abug

The revision of fixing is in the Bugfix sections of the ChangeLog file in the source. Eg. for the latest release:

https://github.com/ARMmbed/mbedtls/blob/mbedtls-2.24.0/ChangeLog

The entries here usually reference the issue number they fixed.

Is this something that you can use for your evaluation?

Regards,

Janos

From: mbed-tls <mbed-tls-bounces@lists.trustedfirmware.org> on behalf of "Innocenti, Michele via mbed-tls" <mbed-tls@lists.trustedfirmware.org>
Reply to: "Innocenti, Michele" <michele_innocenti@baxter.com>
Date: Thursday, 1 October 2020 at 14:04
To: "mbed-tls@lists.trustedfirmware.org" <mbed-tls@lists.trustedfirmware.org>
Subject: [mbed-tls] Official bug list

Hi,

We are evaluating Mbed TLS library and we need to know if it’s available an official list of defects and revision of fixing.

I’m not looking for CVEs but for bugs in the library.

Thanks!

Michele