From: Peter Korsgaard <peter@korsgaard.com>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH] mbedtls: security bump to version 2.7.2
Date: Tue, 01 May 2018 08:55:59 +0200 [thread overview]
Message-ID: <877eonn9ts.fsf@dell.be.48ers.dk> (raw)
In-Reply-To: <be768b1de8c5908cef3e3acbff3bc03adcefd1a0.1524570502.git.baruch@tkos.co.il> (Baruch Siach's message of "Tue, 24 Apr 2018 14:48:22 +0300")
>>>>> "Baruch" == Baruch Siach <baruch@tkos.co.il> writes:
> The release announcement mentions these security fixes:
> Defend against Bellcore glitch attacks by verifying the results of RSA
> private key operations.
> Fix implementation of the truncated HMAC extension. The previous
> implementation allowed an offline 2^80 brute force attack on the HMAC
> key of a single, uninterrupted connection (with no resumption of the
> session).
> Reject CRLs containing unsupported critical extensions.
> Fix a buffer overread in ssl_parse_server_key_exchange() that could
> cause a crash on invalid input. (CVE-2018-9988)
> Fix a buffer overread in ssl_parse_server_psk_hint() that could cause
> a crash on invalid input. (CVE-2018-9989)
> Drop upstream patch.
> Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Committed to 2018.02.x, thanks.
--
Bye, Peter Korsgaard
prev parent reply other threads:[~2018-05-01 6:55 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-04-24 11:48 [Buildroot] [PATCH] mbedtls: security bump to version 2.7.2 Baruch Siach
2018-04-25 13:42 ` Thomas Petazzoni
2018-05-01 6:55 ` Peter Korsgaard [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=877eonn9ts.fsf@dell.be.48ers.dk \
--to=peter@korsgaard.com \
--cc=buildroot@busybox.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.