1
0
Fork 0
forked from mirror/openwrt
openwrt/package/network/services
Hauke Mehrtens ea22e3df3e mbedtls: Update to 2.12.0
Multiple security fixes
* CVE-2018-0497 Remote plaintext recovery on use of CBC based ciphersuites through a timing side-channel
* CVE-2018-0498 Plaintext recovery on use of CBC based ciphersuites through a cache based side-channel

Disable OFB block mode and XTS block cipher mode, added in 2.11.0.
Disable Chacha20 and Poly1305 cryptographic primitives, added in 2.12.0
Patch the so version back to the original one, the API changes are
looking no so invasive.

The size of mbedtls increased a little bit:
ipkg for mips_24kc before:
163.967 Bytes
ipkg for mips_24kc after:
164.753 Bytes

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2018-08-08 22:49:59 +02:00
..
dnsmasq dnsmasq: bump to dnsmasq v2.80test3 2018-07-28 11:23:58 +01:00
dropbear dropbear: close all active clients on shutdown 2018-08-08 15:36:46 +02:00
ead network/services/ead: drop Build/Prepare rule in favor of default one 2016-10-15 11:36:52 +02:00
hostapd hostapd: fix IEEE 802.11r (fast roaming) defaults 2018-05-24 17:24:30 +02:00
igmpproxy igmpproxy: run in foreground for procd 2018-07-18 18:06:15 +01:00
ipset-dns ipset-dns: bump to git HEAD 2017-10-08 20:51:03 +03:00
lldpd lldpd: bump to 1.0.1 2018-04-15 21:41:36 +03:00
odhcpd odhcpd: update to latest git HEAD 2018-07-26 18:55:32 +02:00
omcproxy omcproxy: silence fw3 warnings 2018-01-10 21:38:55 +01:00
openvpn mbedtls: Update to 2.12.0 2018-08-08 22:49:59 +02:00
openvpn-easy-rsa openvpn-easy-rsa: update to 3.0.1 2017-05-31 00:28:26 +02:00
ppp Revert "ppp: make ppp-multilink provide ppp" 2018-03-29 11:57:40 +02:00
relayd treewide: replace LEDE_GIT with PROJECT_GIT 2018-01-10 21:27:32 +01:00
samba36 samba36: add hotplug support 2018-05-02 09:18:27 +02:00
uhttpd uhttpd: update to latest Git head 2018-07-15 14:30:50 +02:00
umdns treewide: replace LEDE_GIT with PROJECT_GIT 2018-01-10 21:27:32 +01:00
wireguard wireguard-tools: add wireguard_watchdog script 2018-07-25 11:23:35 +01:00