Hi Radhika,

We do not plan to extend support for Mbed TLS 2.16 beyond the three year support period.

We do plan to release a 2.x LTS (probably 2.28) alongside the final 2.16 release, so that we always have an LTS available.

Regards

Dave Rodgman

From: mbed-tls mbed-tls-bounces@lists.trustedfirmware.org on behalf of Radhika Jandhyala via mbed-tls mbed-tls@lists.trustedfirmware.org Reply to: Radhika Jandhyala radhikaj@microsoft.com Date: Monday, 22 November 2021 at 10:50 To: "mbed-tls@lists.trustedfirmware.org" mbed-tls@lists.trustedfirmware.org Subject: [mbed-tls] End of Life of LTS branch 2.16

Hi,

I am a maintainer for https://github.com/openenclave/openenclave. We include mbedtls 2.16 as a submodule in our project.

Reading the article below, it states that 2.16 support will last at least till Dec 2021. Will you continue to support 2.16 in 2022? https://tls.mbed.org/tech-updates/blog/announcing-lts-branch-mbedtls-2.16

We are specifically interested in CVE fixes being backported to 2.16 and the timeframe where that will continue. Is there an updated timeline for this?

We do plan to upgrade to 3.0 in early 2022, but we anticipate that will take some effort due to breaking changes.

Thank you very much!

Radhika