Tuesday, January 04, 2022

UPDATE security/polarssl-2.16.12

This release of Mbed TLS provides bug fixes and minor enhancements, and
includes a fix for CVE-2021-44732 (double free in
mbedtls_ssl_set_session() in an error case). More info can be found at
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2021-12.

Overview on changes can be found at
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.12.

Note that this is the last release of the 2.16 long-time support branch.
Guess we should soon update this port to the 2.28 branch, which is the
new LTS branch and will be supported for at least 3 years.

Passes all tests.

Comments/OK?


diff --git Makefile Makefile
index c6bd2f7e600..32044379c6a 100644
--- Makefile
+++ Makefile
@@ -6,7 +6,7 @@ COMMENT= SSL library with an intuitive API and readable source code

GH_ACCOUNT= ARMmbed
GH_PROJECT= mbedtls
-GH_TAGNAME= mbedtls-2.16.11
+GH_TAGNAME= mbedtls-2.16.12
DISTNAME= ${GH_TAGNAME}

# check SOVERSION
diff --git distinfo distinfo
index 68b52d9c070..4244a5ea094 100644
--- distinfo
+++ distinfo
@@ -1,2 +1,2 @@
-SHA256 (mbedtls-2.16.11.tar.gz) = UbuWhcT0/5JV2lZZ/zRridyvEp47oPOysMSKGnSV5wE=
-SIZE (mbedtls-2.16.11.tar.gz) = 2692209
+SHA256 (mbedtls-2.16.12.tar.gz) = CvtKTOW3cfL7htrueGNi++SChfBbc80gX0aiJOwDF4M=
+SIZE (mbedtls-2.16.12.tar.gz) = 2702190
diff --git pkg/PLIST pkg/PLIST
index d66cdcd161a..888c3ff3c19 100644
--- pkg/PLIST
+++ pkg/PLIST
@@ -108,6 +108,7 @@ share/examples/mbedtls/README
@bin share/examples/mbedtls/generic_sum
@bin share/examples/mbedtls/hello
@bin share/examples/mbedtls/key_app
+@bin share/examples/mbedtls/load_roots
@bin share/examples/mbedtls/mini_client
@bin share/examples/mbedtls/mpi_demo
@bin share/examples/mbedtls/pem2der

No comments:

Post a Comment