[packages/mbedtls/MBEDTLS_2] - updated to 2.28.10 (the last release of 2.28 LTS branch) fixes CVE-2024-28960 CVE-2024-45157 CVE

qboosh qboosh at pld-linux.org
Sat May 17 19:51:09 CEST 2025


commit c2410f437277bd0e137c0f26c74071b818bcd0a0
Author: Jakub Bogusz <qboosh at pld-linux.org>
Date:   Sat May 17 19:35:13 2025 +0200

    - updated to 2.28.10 (the last release of 2.28 LTS branch)
      fixes CVE-2024-28960 CVE-2024-45157 CVE-2025-27809 CVE-2025-27810

 mbedtls.spec | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)
---
diff --git a/mbedtls.spec b/mbedtls.spec
index 9d512ba..813b165 100644
--- a/mbedtls.spec
+++ b/mbedtls.spec
@@ -7,13 +7,13 @@
 Summary:	Light-weight cryptographic and SSL/TLS library
 Summary(pl.UTF-8):	Lekka biblioteka kryptograficzna oraz SSL/TLS
 Name:		%{sname}2
-Version:	2.28.3
-Release:	2
+Version:	2.28.10
+Release:	1
 License:	GPL v2+
 Group:		Libraries
-#Source0Download: https://github.com/ARMmbed/mbedtls/releases
-Source0:	https://github.com/ARMmbed/mbedtls/archive/v%{version}/%{sname}-%{version}.tar.gz
-# Source0-md5:	7e1b09243447a0378a78dd5469b68415
+#Source0Download: https://github.com/Mbed-TLS/mbedtls/releases
+Source0:	https://github.com/Mbed-TLS/mbedtls/archive/v%{version}/%{sname}-%{version}.tar.gz
+# Source0-md5:	3da397a7311f39ec3d338818e215e537
 Patch0:		%{sname}-config-dtls-srtp.patch
 URL:		https://www.trustedfirmware.org/projects/mbed-tls/
 BuildRequires:	cmake >= 2.8.12
@@ -150,6 +150,7 @@ rm -rf $RPM_BUILD_ROOT
 %attr(755,root,root) %{_libexecdir}/%{name}/key_ladder_demo
 %attr(755,root,root) %{_libexecdir}/%{name}/key_ladder_demo.sh
 %attr(755,root,root) %{_libexecdir}/%{name}/load_roots
+%attr(755,root,root) %{_libexecdir}/%{name}/metatest
 %attr(755,root,root) %{_libexecdir}/%{name}/mini_client
 %attr(755,root,root) %{_libexecdir}/%{name}/mpi_demo
 %attr(755,root,root) %{_libexecdir}/%{name}/pem2der
@@ -185,8 +186,12 @@ rm -rf $RPM_BUILD_ROOT
 %attr(755,root,root) %{_libdir}/libmbedcrypto.so
 %attr(755,root,root) %{_libdir}/libmbedtls.so
 %attr(755,root,root) %{_libdir}/libmbedx509.so
+%{_includedir}/everest
 %{_includedir}/mbedtls
 %{_includedir}/psa
+%{_pkgconfigdir}/mbedcrypto.pc
+%{_pkgconfigdir}/mbedtls.pc
+%{_pkgconfigdir}/mbedx509.pc
 
 %files static
 %defattr(644,root,root,755)
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/mbedtls.git/commitdiff/c2410f437277bd0e137c0f26c74071b818bcd0a0



More information about the pld-cvs-commit mailing list