Skip to content

Commit fda737e

Browse files
SoumyaWindakuster
authored andcommitted
mbedtls: Upgrade 3.5.0 -> 3.5.2
* Includes security fix for CVE-2024-23170 - Timing side channel in private key RSA operations * Includes security fix for CVE-2024-23775 - Buffer overflow in mbedtls_x509_set_extension() Use canonical URL, add UPSTREAM_CHECK_GITTAGREGEX. License-update: Upstream clarified licensing as dual Apache-2.0 or GPL-2.0 or later Changelog: https://github.com/Mbed-TLS/mbedtls/blob/v3.5.2/ChangeLog Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
1 parent 7d07ad5 commit fda737e

1 file changed

Lines changed: 4 additions & 3 deletions

File tree

meta-networking/recipes-connectivity/mbedtls/mbedtls_3.5.0.bb renamed to meta-networking/recipes-connectivity/mbedtls/mbedtls_3.5.2.bb

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,16 +17,17 @@ understand what the code does. It features: \
1717

1818
HOMEPAGE = "https://tls.mbed.org/"
1919

20-
LICENSE = "Apache-2.0"
21-
LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
20+
LICENSE = "Apache-2.0 | GPL-2.0-or-later"
21+
LIC_FILES_CHKSUM = "file://LICENSE;md5=379d5819937a6c2f1ef1630d341e026d"
2222

2323
SECTION = "libs"
2424

2525
S = "${WORKDIR}/git"
26-
SRCREV = "1ec69067fa1351427f904362c1221b31538c8b57"
26+
SRCREV = "daca7a3979c22da155ec9dce49ab1abf3b65d3a9"
2727
SRC_URI = "git://github.com/ARMmbed/mbedtls.git;protocol=https;branch=master \
2828
file://0001-AES-NI-use-target-attributes-for-x86-32-bit-intrinsi.patch \
2929
file://run-ptest"
30+
UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>\d+(\.\d+)+)"
3031

3132
inherit cmake update-alternatives ptest
3233

0 commit comments

Comments
 (0)