openwrt/package
Antony Kolitsos 6c51ea2eea mbedtls: update to 2.28.10
This release of Mbed TLS provides bug fixes and minor enhancements. This release includes fixes for security issues.

Mbed TLS 2.28.10 is the last release of the 2.28 LTS and won't receive bug fixes or security fixes anymore.
Users are advised to upgrade to a maintained version.

* CVE-2025-27810: Potential authentication bypass in TLS handshake [1]
* CVE-2025-27809: TLS clients should generally call mbedtls_ssl_set_hostname [2]

[1] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-2/
[2] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-1/

Full release announcement:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.10

Signed-off-by: Antony Kolitsos <zeusomighty@hotmail.com>
Link: https://github.com/openwrt/openwrt/pull/18793
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-05-15 20:32:41 +02:00
..
base-files OpenWrt v23.05.5: revert to branch defaults 2024-09-24 00:53:40 +02:00
boot uboot-mediatek: fix image overlaps SPL issue 2025-04-10 21:25:24 +02:00
devel perf: opt-out of lto usage 2023-08-11 12:53:34 +02:00
firmware wireless-regdb: Update to version 2024.10.07 2024-10-19 17:42:47 +02:00
kernel mac80211: fix compilation error for old stable kernel version 2025-03-30 17:01:31 +02:00
libs mbedtls: update to 2.28.10 2025-05-15 20:32:41 +02:00
network lldpd: add custom-tlv handling 2025-03-25 09:54:08 +01:00
system nu801: Mark as nonshared to build in step 1 2024-11-05 10:59:04 +01:00
utils ucode: another fix for host installation 2024-09-20 22:21:03 +02:00
Makefile build: do not depend on $(STAGING_DIR)/.prepared when in SDK 2024-03-04 23:59:24 +01:00