PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8627