From 6ee0138a6cd8f274b82279f995ba6d0e55e09a91 Mon Sep 17 00:00:00 2001 From: Magnus Kroken Date: Sat, 25 Jan 2020 18:33:41 +0100 Subject: mbedtls: update to 2.16.4 Fixes side channel vulnerabilities in mbed TLS' implementation of ECDSA. Release announcement: https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.4-and-2.7.13-released Security advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-12 Fixes: * CVE-2019-18222: Side channel attack on ECDSA Signed-off-by: Magnus Kroken (cherry picked from commit 6e96fd90471a49185bcfe9dcb4844d444674ecab) --- package/libs/mbedtls/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'package/libs/mbedtls/Makefile') diff --git a/package/libs/mbedtls/Makefile b/package/libs/mbedtls/Makefile index 307d03432e..618a74703a 100644 --- a/package/libs/mbedtls/Makefile +++ b/package/libs/mbedtls/Makefile @@ -8,13 +8,13 @@ include $(TOPDIR)/rules.mk PKG_NAME:=mbedtls -PKG_VERSION:=2.16.3 +PKG_VERSION:=2.16.4 PKG_RELEASE:=1 PKG_USE_MIPS16:=0 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-gpl.tgz PKG_SOURCE_URL:=https://tls.mbed.org/download/ -PKG_HASH:=fd01fe4b289116df7781d05e1ef712b6c98823c5334f4a27404f13a8d066ef6a +PKG_HASH:=5fdb9c43ab43fd9bcc3631508170b089ede7b86dd655253a93cb0ffeb42309f3 PKG_BUILD_PARALLEL:=1 PKG_LICENSE:=GPL-2.0+ -- cgit v1.2.3