Files
meta-openembedded/meta-networking/recipes-connectivity/mbedtls
Beniamin Sandu f51fe152e8 mbedtls: upgrade 2.28.4 -> 2.28.7
Includes security fixes for:
CVE-2023-43615 - Buffer overread in TLS stream cipher suites
CVE-2024-23170 - Timing side channel in private key RSA operations
CVE-2024-23775 - Buffer overflow in mbedtls_x509_set_extension()

Other changes:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.5

License updated to dual Apache-2.0 OR GPL-2.0-or-later.

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09 09:52:06 -08:00
..
2023-10-30 14:29:34 -07:00