From 75c5ab4caf9cc14874e6b5d8b34064fb8862e82e Mon Sep 17 00:00:00 2001 From: Hauke Mehrtens Date: Thu, 15 Feb 2018 21:58:47 +0100 Subject: mbedtls: update to version 2.7.0 This fixes the following security problems: * CVE-2018-0488: Risk of remote code execution when truncated HMAC is enabled * CVE-2018-0487: Risk of remote code execution when verifying RSASSA-PSS signatures Signed-off-by: Hauke Mehrtens --- package/libs/mbedtls/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'package/libs/mbedtls/Makefile') diff --git a/package/libs/mbedtls/Makefile b/package/libs/mbedtls/Makefile index 3a2b292285..8f6a5be295 100644 --- a/package/libs/mbedtls/Makefile +++ b/package/libs/mbedtls/Makefile @@ -8,13 +8,13 @@ include $(TOPDIR)/rules.mk PKG_NAME:=mbedtls -PKG_VERSION:=2.6.0 +PKG_VERSION:=2.7.0 PKG_RELEASE:=1 PKG_USE_MIPS16:=0 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-gpl.tgz PKG_SOURCE_URL:=https://tls.mbed.org/download/ -PKG_HASH:=a99959d7360def22f9108d2d487c9de384fe76c349697176b1f22370080d5810 +PKG_HASH:=2c6fe289b4b50bf67b4839e81b07fcf52a19f5129d0241d2aa4d49cb1ef11e4f PKG_BUILD_PARALLEL:=1 PKG_LICENSE:=GPL-2.0+ -- cgit v1.2.3