2.2.4

Release notes

• upgrade lwip to STABLE-2_1_3_RELEASE (+ mqtt.c @089697b)
• upgrade mbedtls to v2.28.1
• zone3.1 poll inbox when resuming from wfi with global irq disabled
• update README.md

Mbed TLS 2.28.1 - Important Security Updates

• Zeroize dynamically-allocated buffers used by the PSA Crypto key storage
  module before freeing them. These buffers contain secret key material, and
  could thus potentially leak the key through freed heap.
• Fix a potential heap buffer overread in TLS 1.2 server-side when
  MBEDTLS_USE_PSA_CRYPTO is enabled, an opaque key (created with
  mbedtls_pk_setup_opaque()) is provisioned, and a static ECDH ciphersuite
  is selected. This may result in an application crash or potentially an
  information leak.
• Fix a buffer overread in DTLS ClientHello parsing in servers with
  MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled. An unauthenticated client
  or a man-in-the-middle could cause a DTLS server to read up to 255 bytes
  after the end of the SSL input buffer. The buffer overread only happens
  when MBEDTLS_SSL_IN_CONTENT_LEN is less than a threshold that depends on
  the exact configuration: 258 bytes if using mbedtls_ssl_cookie_check(),
  and possibly up to 571 bytes with a custom cookie check function.
  Reported by the Cybeats PSI Team.

For full details see https://mbed-tls.readthedocs.io/en/latest/security-advisories/advisories/mbedtls-security-advisory-2022-07.html