mbed TLS -- plaintext recovery vulnerabilities

Simon Butcher reports:

• When using a CBC based ciphersuite, a remote attacker can partially recover the plaintext.
• When using a CBC based ciphersuite, an attacker with the ability to execute arbitrary code on the machine under attack can partially recover the plaintext by use of cache based side-channels.

[source]