diff options
| author | gudni <gudni.m.g@gmail.com> | 2025-07-17 13:53:58 +0000 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2025-07-27 14:35:10 -0400 |
| commit | 7b05b691041d894508b22148c872b266d0c2f5ee (patch) | |
| tree | e877f5aa93d5c0ae81a25a5a6a3948ae4665ac8c | |
| parent | 4f92de2059f82913aea763bf0e6bbd5801c429d4 (diff) | |
| download | meta-openembedded-7b05b691041d894508b22148c872b266d0c2f5ee.tar.gz | |
mbedtls: upgrade 3.6.3.1 -> 3.6.4
Fixes several security vulnerabilities:
CVE-2025-49601, CVE-2025-49600, CVE-2025-52496,
CVE-2025-47917, CVE-2025-48965, CVE-2025-52497,
and CVE-2025-49087
The framework directory has been changed into a git submodule.[1][2]
The recipe now uses Git Submodule Fetcher (gitsm)
Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4
[1] https://github.com/Mbed-TLS/mbedtls/commit/8cf5666a174237998a7965e284d7ba8c1655d16d
[2] https://github.com/Mbed-TLS/mbedtls/commit/c90c6d8ff787ab8787d9373b0e662a95ed1f4dae
Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
| -rw-r--r-- | meta-networking/recipes-connectivity/mbedtls/mbedtls_3.6.4.bb (renamed from meta-networking/recipes-connectivity/mbedtls/mbedtls_3.6.3.1.bb) | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.6.3.1.bb b/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.6.4.bb index 1e99f92306..0905c14aa7 100644 --- a/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.6.3.1.bb +++ b/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.6.4.bb | |||
| @@ -23,11 +23,11 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=379d5819937a6c2f1ef1630d341e026d" | |||
| 23 | SECTION = "libs" | 23 | SECTION = "libs" |
| 24 | 24 | ||
| 25 | S = "${WORKDIR}/git" | 25 | S = "${WORKDIR}/git" |
| 26 | SRC_URI = "git://github.com/Mbed-TLS/mbedtls.git;protocol=https;branch=main;tag=v${PV} \ | 26 | SRC_URI = "gitsm://github.com/Mbed-TLS/mbedtls.git;protocol=https;branch=mbedtls-3.6;tag=v${PV} \ |
| 27 | file://run-ptest \ | 27 | file://run-ptest \ |
| 28 | " | 28 | " |
| 29 | 29 | ||
| 30 | SRCREV = "6fb5120fde4ab889bea402f5ab230c720b0a3b9a" | 30 | SRCREV = "c765c831e5c2a0971410692f92f7a81d6ec65ec2" |
| 31 | 31 | ||
| 32 | UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>\d+(\.\d+)+)" | 32 | UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>\d+(\.\d+)+)" |
| 33 | 33 | ||