mbedtls: update to 2.14.1 for 18.06
authorStijn Segers <foss@volatilesystems.org>
Sat, 22 Dec 2018 10:16:17 +0000 (11:16 +0100)
committerJo-Philipp Wich <jo@mein.io>
Wed, 30 Jan 2019 09:16:19 +0000 (10:16 +0100)
commit1447924c9581e11c296b1ca8798e1253ee22d2fd
treefc006d4b5060375ce05fd175bf1c27002c1e9941
parente5a0b6cde051bd24280e9c3a360e65617bce2416
mbedtls: update to 2.14.1 for 18.06

Updates mbedtls to 2.14.1. This builds on the previous master commit 7849f74117ce83e4cfcd1448a22cc05dbf9b3486.

Fixes in 2.13.0:
* Fixed a security issue in the X.509 module which could lead to a buffer overread during certificate extensions parsing.
* Several bugfixes.
* Improvements for better support for DTLS on low-bandwidth, high latency networks with high packet loss.

Fixes in 2.14.1:
* CVE-2018-19608: Local timing attack on RSA decryption

Includes master commit 9e7c4702a1f4e49113d10bc736f50e8a06bdb8ba 'mbedtls: fix compilation on ARM < 6'.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
[Update to 2.14.1]
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
[Adapted and squashed for 18.06.1+]
Signed-off-by: Stijn Segers <foss@volatilesystems.org>
Acked-by: Hauke Mehrtens <hauke@hauke-m.de>
package/libs/mbedtls/Makefile
package/libs/mbedtls/patches/200-config.patch
package/libs/mbedtls/patches/300-bn_mul.h-Use-optimized-MULADDC-code-only-on-ARM-6.patch [new file with mode: 0644]
package/libs/mbedtls/patches/300-soversion-compatibility.patch