domenico/openwrt-R7800-nss
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
2c8a433cd2c4f0cd4049e5b0fa147c824ec27c62
openwrt-R7800-nss/package/libs
History
Antony Kolitsos 2c8a433cd2 mbedtls: update to 3.6.4 
This release includes fixes for security issues.

Mbed TLS 3.6 is a long-term support (LTS) branch. It will be supported with bug-fixes and security fixes until at least March 2027.

Security Advisories

For full details, please see the following links:

    Race condition in AESNI support detection [1]
    Heap buffer under-read when parsing PEM-encrypted material [2]
    Unchecked return value in LMS verification allows signature bypass [3]
    Out-of-bounds read in mbedtls_lms_import_public_key() [4]
    Timing side-channel in block cipher decryption with PKCS#7 padding [5]
    NULL pointer dereference after using mbedtls_asn1_store_named_data() [6]
    Misleading memory management in mbedtls_x509_string_to_names() [7]

[1] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-1/
[2] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-2/
[3] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-3/
[4] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-4/
[5] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-5/
[6] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-6/
[7] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-7/

Signed-off-by: Antony Kolitsos <zeusomighty@hotmail.com>
Link: https://github.com/openwrt/openwrt/pull/19291
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-07-04 11:10:16 +02:00
..
argp-standalone
treewide: opt-out of tree-wide LTO usage
2023-03-21 18:28:23 +01:00
elfutils
toolchain: gcc: drop GCC11
2025-05-26 19:20:56 +02:00
gettext-full
gettext-full: update to 0.22.5
2024-04-25 21:33:51 +02:00
gmp
gmp: fix compilation with GCC 15.1
2025-06-08 12:46:17 +02:00
jansson
treewide: add support for "lto" in PKG_BUILD_FLAGS
2023-03-21 18:28:22 +01:00
libbpf
libbpf: Update to v1.5.0
2024-12-28 15:41:43 +01:00
libbsd
libbsd: update to 0.11.8
2024-01-30 10:39:21 +01:00
libcap
libcap: update to 2.69
2023-05-22 18:51:31 +02:00
libevent2
libevent2: make cmake use relative imported path
2024-03-13 00:24:43 +00:00
libiconv-full
libiconv-full: update to 1.18
2025-05-04 20:50:33 +02:00
libjson-c
libjson-c: update to 0.18
2024-10-05 12:29:20 +02:00
libmd
libmd: update to 1.1.0
2023-10-12 09:50:25 +02:00
libmnl
libmnl: add PKG_CPE_ID
2022-09-06 16:36:44 +01:00
libnetfilter-conntrack
packages: assign PKG_CPE_ID for all missing packages
2023-09-19 20:21:13 +02:00
libnfnetlink
libnfnetlink: add PKG_CPE_ID
2022-09-06 16:36:45 +01:00
libnftnl
libnftnl: update to 1.2.8
2024-11-11 00:05:06 +01:00
libnl
libnl: update to 3.11.0
2025-03-11 23:57:22 +01:00
libnl-tiny
libnl-tiny: update to Git HEAD (2025-03-19)
2025-03-19 13:19:34 +01:00
libpcap
libpcap: backport support for various DSA tags
2025-03-05 19:23:50 +00:00
libselinux
libselinux: update to 3.8.1
2025-05-02 19:15:42 +02:00
libsemanage
libsemanage: update to 3.8.1 and fix build with GCC14
2025-05-02 19:15:42 +02:00
libsepol
libsepol: update to 3.8.1
2025-05-02 19:15:42 +02:00
libtool
libtool: update to 2.4.7
2022-07-10 19:07:47 +02:00
libtraceevent
libtraceevent: update to 1.8.4
2025-03-25 20:26:45 +01:00
libtracefs
libtracefs: update to 1.8.2
2025-05-13 16:48:49 +02:00
libubox
libubox: update to Git HEAD (2024-12-19)
2025-05-05 13:57:08 +02:00
libunistring
libunistring: update to 1.2
2024-08-07 18:05:32 +02:00
libunwind
libunwind: add support for loongarch64
2024-05-04 14:14:24 +08:00
libusb
libusb: update to 1.0.27
2024-09-22 18:20:44 +02:00
libxml2
libxml2: update to 2.13.6
2025-03-11 23:35:40 +01:00
mbedtls
mbedtls: update to 3.6.4
2025-07-04 11:10:16 +02:00
mpfr
mpfr: import from packages feed
2024-01-04 22:40:05 +01:00
musl-fts
musl-fts: remove shared libraries from host
2022-03-27 14:38:13 +02:00
ncurses
ncurses: Fix path in ncursesw.pc
2024-07-28 19:30:35 +02:00
nettle
nettle: update to 3.10.1
2025-03-16 22:21:14 +01:00
openssl
openssl: update to 3.5.1
2025-07-03 13:03:39 +02:00
pcre2
package/libs/pcre2: fix PKG_CPE_ID
2024-04-27 12:05:43 +02:00
popt
treewide: Add extra CPE identifier
2023-09-25 23:06:33 +02:00
readline
libreadlne: create symlinks for .so
2024-11-16 17:20:12 +01:00
sysfsutils
treewide: Add extra CPE identifier
2023-09-25 23:06:33 +02:00
toolchain
build: lock versions for special APK packages
2025-02-04 13:48:59 +00:00
uclient
uclient: update to Git HEAD (2024-10-22)
2024-10-22 13:15:54 +02:00
udebug
udebug: add missing dependencies
2025-04-24 14:22:58 +02:00
ustream-ssl
ustream-ssl: update to Git HEAD (2024-07-28)
2024-08-25 17:27:32 +02:00
wolfssl
wolfssl: Update to version 5.7.6
2025-01-27 23:28:05 +01:00
xcrypt
libcrypt-compat: introduce package
2025-06-23 11:19:08 +02:00
zlib
zlib: switch to git source
2025-02-24 12:44:02 +01:00