From 9af7520e39aee762da99afeb6e578c5271eada17 Mon Sep 17 00:00:00 2001 From: Magnus Kroken Date: Sun, 16 Sep 2018 00:44:43 +0200 Subject: [PATCH] mbedtls: update to 2.13.0 * Fixed a security issue in the X.509 module which could lead to a buffer overread during certificate extensions parsing. * Several bugfixes. * Improvements for better support for DTLS on low-bandwidth, high latency networks with high packet loss. Signed-off-by: Magnus Kroken (backported from 7849f74117ce83e4cfcd1448a22cc05dbf9b3486) --- package/libs/mbedtls/Makefile | 4 +-- .../patches/300-soversion-compatibility.patch | 34 ------------------- 2 files changed, 2 insertions(+), 36 deletions(-) delete mode 100644 package/libs/mbedtls/patches/300-soversion-compatibility.patch diff --git a/package/libs/mbedtls/Makefile b/package/libs/mbedtls/Makefile index 659bf59d88..b775c72a5c 100644 --- a/package/libs/mbedtls/Makefile +++ b/package/libs/mbedtls/Makefile @@ -8,13 +8,13 @@ include $(TOPDIR)/rules.mk PKG_NAME:=mbedtls -PKG_VERSION:=2.12.0 +PKG_VERSION:=2.13.0 PKG_RELEASE:=1 PKG_USE_MIPS16:=0 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-gpl.tgz PKG_SOURCE_URL:=https://tls.mbed.org/download/ -PKG_HASH:=8661d19a896a5a7a232ed01ac7f05cf0ec3514798f18076c2c9ef965fbeb5a28 +PKG_HASH:=a08ddf08aae55fc4f48fbc6281fcb08bc5c53ed53ffd15355ee0d75ec32b53ae PKG_BUILD_PARALLEL:=1 PKG_LICENSE:=GPL-2.0+ diff --git a/package/libs/mbedtls/patches/300-soversion-compatibility.patch b/package/libs/mbedtls/patches/300-soversion-compatibility.patch deleted file mode 100644 index a352b449f1..0000000000 --- a/package/libs/mbedtls/patches/300-soversion-compatibility.patch +++ /dev/null @@ -1,34 +0,0 @@ ---- a/library/CMakeLists.txt -+++ b/library/CMakeLists.txt -@@ -159,7 +159,7 @@ endif(USE_STATIC_MBEDTLS_LIBRARY) - - if(USE_SHARED_MBEDTLS_LIBRARY) - add_library(mbedcrypto SHARED ${src_crypto}) -- set_target_properties(mbedcrypto PROPERTIES VERSION 2.12.0 SOVERSION 3) -+ set_target_properties(mbedcrypto PROPERTIES VERSION 2.12.0 SOVERSION 1) - target_link_libraries(mbedcrypto ${libs}) - - add_library(mbedx509 SHARED ${src_x509}) -@@ -167,7 +167,7 @@ if(USE_SHARED_MBEDTLS_LIBRARY) - target_link_libraries(mbedx509 ${libs} mbedcrypto) - - add_library(mbedtls SHARED ${src_tls}) -- set_target_properties(mbedtls PROPERTIES VERSION 2.12.0 SOVERSION 11) -+ set_target_properties(mbedtls PROPERTIES VERSION 2.12.0 SOVERSION 10) - target_link_libraries(mbedtls ${libs} mbedx509) - - install(TARGETS mbedtls mbedx509 mbedcrypto ---- a/library/Makefile -+++ b/library/Makefile -@@ -35,9 +35,9 @@ LOCAL_CFLAGS += -fPIC -fpic - endif - endif - --SOEXT_TLS=so.11 -+SOEXT_TLS=so.10 - SOEXT_X509=so.0 --SOEXT_CRYPTO=so.3 -+SOEXT_CRYPTO=so.1 - - # Set AR_DASH= (empty string) to use an ar implentation that does not accept - # the - prefix for command line options (e.g. llvm-ar) -- 2.30.2