hak5
/
openwrt
mirror of https://github.com/hak5/openwrt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openwrt/package/libs
History
Magnus Kroken 329f6a96b7 mbedtls: update to 2.5.1 
Fixes some security issues (no remote exploits), and introduces
some changes. See release notes for details:
https://tls.mbed.org/tech-updates/releases/mbedtls-2.5.1-2.1.8-and-1.3.20-released

* Fixes an unlimited overread of heap-based buffers in mbedtls_ssl_read()
* Adds exponent blinding to RSA private operations
* Wipes stack buffers in RSA private key operations (rsa_rsaes_pkcs1_v15_decrypt(), rsa_rsaes_oaep_decrypt())
* Removes SHA-1 and RIPEMD-160 from the default hash algorithms for certificate verification.
* Fixes offset in FALLBACK_SCSV parsing that caused TLS server to fail to detect it sometimes.
* Tighten parsing of RSA PKCS#1 v1.5 signatures, to avoid a potential Bleichenbacher/BERserk-style attack.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
 		2017-06-26 09:56:07 +02:00
..
argp-standalone treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
cyassl cyassl: update to wolfssl version 3.10.0 2017-01-10 00:10:15 +01:00
elfutils elfutils: Pass -Wno-unused-result to silence warnings as errors 2017-05-26 15:42:03 -07:00
gettext package: replace $(STAGING_DIR)/host with $(STAGING_DIR_HOSTPKG) 2017-01-10 22:15:37 +01:00
gettext-full gettext-full: fix to use $STAGING_DIR_HOSTPKG instead of $STAGING_DIR/host 2017-01-19 00:05:10 +01:00
gmp gmp: Update to 6.1.2 2017-01-03 14:24:33 +01:00
libbsd treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
libconfig treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
libevent2 treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
libiconv package: replace $(STAGING_DIR)/host with $(STAGING_DIR_HOSTPKG) 2017-01-10 22:15:37 +01:00
libiconv-full treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
libjson-c json-c: disable implicit fallthrough warning (gcc 7) 2017-05-25 19:01:07 +02:00
libmnl treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
libnetfilter-conntrack treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
libnetfilter-cthelper treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
libnetfilter-cttimeout treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
libnetfilter-log treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
libnetfilter-queue treewide: clean up and unify PKG_VERSION for git based downloads 2016-12-22 16:42:21 +01:00
libnfnetlink treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
libnftnl libs/libnftnl: Update to 1.0.7 2017-05-16 17:22:58 +02:00
libnl libnl: Fix building with uClibc 2017-03-16 11:28:28 +01:00
libnl-tiny libnl-tiny: define _GNU_SOURCE if not defined 2016-12-20 09:35:36 +01:00
libpcap libs/libpcap: Rework URLs 2017-03-22 09:16:23 +01:00
libroxml treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
librpc treewide: clean up and unify PKG_VERSION for git based downloads 2016-12-22 16:42:21 +01:00
libtool libtool: don't clobber host libtool infrastructure 2017-01-22 00:40:38 +01:00
libubox libubox: update to the latest version, fixes a runqueue use-after-free bug 2017-06-17 11:51:41 +02:00
libunwind libunwind: update to version 1.2.1 2017-06-19 14:43:09 +08:00
libusb libusb: Update to 1.0.21 2017-01-03 14:24:33 +01:00
libusb-compat treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
lzo lzo: Update to 2.10 2017-03-20 08:25:49 +01:00
mbedtls mbedtls: update to 2.5.1 2017-06-26 09:56:07 +02:00
ncurses ncurses: revert $(STAGING_DIR_HOSTPKG) to $(STAGING_DIR)/host where appropriate 2017-01-14 18:58:44 +01:00
nettle treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
openssl libs/openssl: Refresh mirror list 2017-03-22 09:16:23 +01:00
popt treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
readline libreadline: add host-build 2017-06-24 14:38:14 +02:00
sysfsutils treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
toolchain toolchain: Package libgomp 2017-05-11 13:42:55 -07:00
uclibc++ uclibc++: patch bugfix erase() on derived __base_associative 2017-02-09 12:26:55 +01:00
uclient uclient: Update to 2016-12-09 2017-01-02 21:06:13 +01:00
ustream-ssl ustream-ssl: remove legacy polarssl support 2017-01-09 14:35:09 +01:00
zlib zlib: Update to 1.2.11 2017-01-16 19:52:07 +01:00