diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2018-08-10 21:54:02 +0200 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2018-08-10 22:56:50 +0200 |
| commit | 5886a5060a4cd17e87a60028d878525150075653 (patch) | |
| tree | 086eed06d26edbf23d3c2cfb5c26f09a3df2ce4d /package/libs/mbedtls/patches | |
| parent | 9bc43f3e65bc8e0bb3d0c5ea8ff906111197afb9 (diff) | |
| download | upstream-5886a5060a4cd17e87a60028d878525150075653.tar.gz upstream-5886a5060a4cd17e87a60028d878525150075653.tar.bz2 upstream-5886a5060a4cd17e87a60028d878525150075653.zip | |
mbedtls: update to version 2.7.5
This fixes the following security problems:
* CVE-2018-0497: Remote plaintext recovery on use of CBC based ciphersuites through a timing side-channel
* CVE-2018-0498: Plaintext recovery on use of CBC based ciphersuites through a cache based side-channel
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Diffstat (limited to 'package/libs/mbedtls/patches')
| -rw-r--r-- | package/libs/mbedtls/patches/300-soversion-compatibility.patch | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/package/libs/mbedtls/patches/300-soversion-compatibility.patch b/package/libs/mbedtls/patches/300-soversion-compatibility.patch index 320482c7cd..dc957871ea 100644 --- a/package/libs/mbedtls/patches/300-soversion-compatibility.patch +++ b/package/libs/mbedtls/patches/300-soversion-compatibility.patch @@ -8,8 +8,8 @@ the new library with binaries compiled against the old library. if(USE_SHARED_MBEDTLS_LIBRARY) add_library(mbedcrypto SHARED ${src_crypto}) -- set_target_properties(mbedcrypto PROPERTIES VERSION 2.7.3 SOVERSION 2) -+ set_target_properties(mbedcrypto PROPERTIES VERSION 2.7.3 SOVERSION 0) +- set_target_properties(mbedcrypto PROPERTIES VERSION 2.7.5 SOVERSION 2) ++ set_target_properties(mbedcrypto PROPERTIES VERSION 2.7.5 SOVERSION 0) target_link_libraries(mbedcrypto ${libs}) add_library(mbedx509 SHARED ${src_x509}) |