diff options
| author |   Soumya Sambu <soumya.sambu@windriver.com> | 2024-02-19 12:46:57 +0000 |
|---|---|---|
| committer |   Armin Kuster <akuster808@gmail.com> | 2024-02-25 12:45:56 -0500 |
| commit | 6b0bc1584f3c9f1d4f49470182d233ab5239fbbb (patch) | |
| tree | 8d574606a9284b32a0486cc5263fe77e7d0e7c0e | |
| parent | c461d980c41c6aa178e20d6dba7dae4674fef33f (diff) | |
| download | meta-openembedded-contrib-6b0bc1584f3c9f1d4f49470182d233ab5239fbbb.tar.gz | |
mbedtls: Upgrade 3.5.0 -> 3.5.2
* Includes security fix for CVE-2024-23170 - Timing side channel in private key RSA operations
* Includes security fix for CVE-2024-23775 - Buffer overflow in mbedtls_x509_set_extension()
Use canonical URL, add UPSTREAM_CHECK_GITTAGREGEX.
License-update: Upstream clarified licensing as dual Apache-2.0 or GPL-2.0 or later
Changelog:
https://github.com/Mbed-TLS/mbedtls/blob/v3.5.2/ChangeLog
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
| -rw-r--r-- | meta-networking/recipes-connectivity/mbedtls/mbedtls_3.5.2.bb (renamed from meta-networking/recipes-connectivity/mbedtls/mbedtls_3.5.0.bb) | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.5.0.bb b/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.5.2.bb index d57e717bd8..2fedac48cf 100644 --- a/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.5.0.bb +++ b/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.5.2.bb @@ -17,16 +17,17 @@ understand what the code does. It features: \ HOMEPAGE = "https://tls.mbed.org/" -LICENSE = "Apache-2.0" -LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" +LICENSE = "Apache-2.0 | GPL-2.0-or-later" +LIC_FILES_CHKSUM = "file://LICENSE;md5=379d5819937a6c2f1ef1630d341e026d" SECTION = "libs" S = "${WORKDIR}/git" -SRCREV = "1ec69067fa1351427f904362c1221b31538c8b57" +SRCREV = "daca7a3979c22da155ec9dce49ab1abf3b65d3a9" SRC_URI = "git://github.com/ARMmbed/mbedtls.git;protocol=https;branch=master \ file://0001-AES-NI-use-target-attributes-for-x86-32-bit-intrinsi.patch \ file://run-ptest" +UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>\d+(\.\d+)+)" inherit cmake update-alternatives ptest |