Path to this page:
./
security/mbedtls,
Lightweight, modular cryptographic and SSL/TLS library
Branch: pkgsrc-2020Q1,
Version: 2.16.6,
Package name: mbedtls-2.16.6,
Maintainer: pkgsrc-usersmbed TLS (formerly known as PolarSSL) makes it trivially easy for developers
to include cryptographic and SSL/TLS capabilities in their (embedded)
products, facilitating this functionality with a minimal coding footprint.
Required to build:[
pkgtools/cwrappers]
Package options: mbedtls-tools
Master sites:
SHA1: 3cb5b681597a5bd798d31038c129c0dc911d8a2c
RMD160: da5ede944292874afdb24a8fe21c643b34255206
Filesize: 2635.957 KB
Version history: (Expand)
- (2020-04-28) Updated to version: mbedtls-2.16.6
- (2020-04-20) Package added to pkgsrc.se, version mbedtls-2.16.5 (created)
CVS history: (Expand)
2020-04-28 18:23:53 by Benny Siegert | Files touched by this commit (2) |
Log message:
Pullup ticket #6170 - requested by nia
security/mbedtls: security fix
Revisions pulled up:
- security/mbedtls/Makefile 1.14
- security/mbedtls/distinfo 1.9
---
Module Name: pkgsrc
Committed By: nia
Date: Sat Apr 18 14:21:56 UTC 2020
Modified Files:
pkgsrc/security/mbedtls: Makefile distinfo
Log message:
mbedtls: Update to 2.16.6
= mbed TLS 2.16.6 branch released 2020-04-14
Security
* Fix side channel in ECC code that allowed an adversary with access to
precise enough timing and memory access information (typically an
untrusted operating system attacking a secure enclave) to fully recover
an ECDSA private key. Found and reported by Alejandro Cabrera Aldaya,
Billy Brumley and Cesar Pereida Garcia. CVE-2020-10932
* Fix a potentially remotely exploitable buffer overread in a
DTLS client when parsing the Hello Verify Request message.
Bugfix
* Fix compilation failure when both MBEDTLS_SSL_PROTO_DTLS and
MBEDTLS_SSL_HW_RECORD_ACCEL are enabled.
* Fix a function name in a debug message. Contributed by Ercan Ozturk in
#3013.
|