This release of Mbed TLS provides bug fixes and minor enhancements, and includes a fix for CVE-2021-44732 (double free in mbedtls_ssl_set_session() in an error case). More info can be found at https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2021-12.
Overview on changes can be found at https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.12. Note that this is the last release of the 2.16 long-time support branch. Guess we should soon update this port to the 2.28 branch, which is the new LTS branch and will be supported for at least 3 years. Passes all tests. Comments/OK? diff --git Makefile Makefile index c6bd2f7e600..32044379c6a 100644 --- Makefile +++ Makefile @@ -6,7 +6,7 @@ COMMENT= SSL library with an intuitive API and readable source code GH_ACCOUNT= ARMmbed GH_PROJECT= mbedtls -GH_TAGNAME= mbedtls-2.16.11 +GH_TAGNAME= mbedtls-2.16.12 DISTNAME= ${GH_TAGNAME} # check SOVERSION diff --git distinfo distinfo index 68b52d9c070..4244a5ea094 100644 --- distinfo +++ distinfo @@ -1,2 +1,2 @@ -SHA256 (mbedtls-2.16.11.tar.gz) = UbuWhcT0/5JV2lZZ/zRridyvEp47oPOysMSKGnSV5wE= -SIZE (mbedtls-2.16.11.tar.gz) = 2692209 +SHA256 (mbedtls-2.16.12.tar.gz) = CvtKTOW3cfL7htrueGNi++SChfBbc80gX0aiJOwDF4M= +SIZE (mbedtls-2.16.12.tar.gz) = 2702190 diff --git pkg/PLIST pkg/PLIST index d66cdcd161a..888c3ff3c19 100644 --- pkg/PLIST +++ pkg/PLIST @@ -108,6 +108,7 @@ share/examples/mbedtls/README @bin share/examples/mbedtls/generic_sum @bin share/examples/mbedtls/hello @bin share/examples/mbedtls/key_app +@bin share/examples/mbedtls/load_roots @bin share/examples/mbedtls/mini_client @bin share/examples/mbedtls/mpi_demo @bin share/examples/mbedtls/pem2der
