lede/package/libs
CN_SZTL a07a47018c
mbedtls: update to 2.16.7 (#5377)
Mbed TLS 2.16.7 is a maintenance release of the Mbed TLS 2.16 branch,
and provides bug fixes and minor enhancements. This release includes
fixes for security issues and the most severe one is described in more
detail in a security advisory:
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-07

* Fix a side channel vulnerability in modular exponentiation that could
reveal an RSA private key used in a secure enclave.
* Fix side channel in mbedtls_ecp_check_pub_priv() and
mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private
key that didn't include the uncompressed public key), as well as
mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL
f_rng argument. An attacker with access to precise enough timing and
memory access information (typically an untrusted operating system
attacking a secure enclave) could fully recover the ECC private key.
* Fix issue in Lucky 13 counter-measure that could make it ineffective when
hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT
macros).

Due to Mbed TLS moving from ARMmbed to the Trusted Firmware project, some
changes to the download URLs are required. For the time being, the
ARMmbed/mbedtls Github repository is the canonical source for Mbed TLS.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
[Use https://codeload.github.com and new tar.gz file]
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Co-authored-by: Magnus Kroken <mkroken@gmail.com>
2020-08-30 21:17:26 +08:00
..
argp-standalone Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
elfutils Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
gettext update source 2017-09-06 19:19:45 +08:00
gettext-full Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
gmp Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
jansson Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libbsd Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libcxx Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libdouble-conversion Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libevent2 Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libiconv update source 2017-09-06 19:19:45 +08:00
libiconv-full Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libjson-c Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libmnl libmnl: update ABI version 2020-03-24 18:24:26 +08:00
libnetfilter-conntrack Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libnetfilter-cthelper Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libnetfilter-cttimeout Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libnetfilter-log Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libnetfilter-queue Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libnfnetlink Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libnftnl libmnl: update ABI version 2020-03-24 18:24:26 +08:00
libnl libnl: update to lastest version 2019-11-23 09:58:26 -08:00
libnl-tiny package: update ipv6 to latest (#3021) 2020-02-10 15:40:14 +08:00
libpcap Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libroxml Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libselinux fix depends for libdevmapper & change host pkg name (#5325) 2020-08-18 01:40:34 +08:00
libsepol fix depends for libdevmapper & change host pkg name (#5325) 2020-08-18 01:40:34 +08:00
libtool Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libubox ipq40xx: rework with new v5.4 essedma eth setting 2020-07-03 12:17:04 +08:00
libunwind Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libusb Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
libusb-compat Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
lzo Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
mbedtls mbedtls: update to 2.16.7 (#5377) 2020-08-30 21:17:26 +08:00
ncurses Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
nettle Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
nghttp2 Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
openssl openssl: bump to 1.1.1g (#4415) 2020-04-23 10:47:31 +08:00
pcre fix depends for libdevmapper & change host pkg name (#5325) 2020-08-18 01:40:34 +08:00
popt Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
readline Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
sysfsutils Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
toolchain Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
uclibc++ Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
uclient Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
ustream-ssl Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
wolfssl Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
zlib Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00