From 08c78948dd1eafdadc02a96ce97133137f760df1 Mon Sep 17 00:00:00 2001 From: Yegor Yefremov Date: Mon, 5 Oct 2026 15:56:59 +0200 Subject: [PATCH] package/mbedtls: security bump to v3.6.7 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit For more information about the release, see: - https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.7 - https://github.com/Mbed-TLS/mbedtls/compare/mbedtls-3.6.6..mbedtls-3.6.7 Fixes the following vulnerabilities: - CVE-2026-50587: Timing side-channel in RSA PKCS#1 v1.5 decryption For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50587 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-rsa-pkcs1-v15-decryption-timing-side-channel/ - CVE-2026-50581: Extended master secret calculation failure ignored For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50581 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-extended-master-secret-calculation-failure-ignored/ - CVE-2026-50640: Ignored TLS 1.3 resumption secret derivation error For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50640 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-ignored-tls13-resumption-secret-derivation-error/ - CVE-2026-50713: Heap corruption with early renegotiation after corrupted record in DTLS For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50713 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-heap-corruption-early-renegotiation-corrupted-dtls-record/ - CVE-2026-50584: ChaCha20 counter overflow can reuse keystream For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50584 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-chacha20-counter-overflow-keystream-reuse/ - CVE-2026-73096: TLS 1.3 early data integrity failure due to buffered plaintext across key change For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-73096 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls13-early-data-integrity-failure-key-change/ - CVE-2026-35336: Possible buffer overflow in mbedtls_ecdh_calc_secret() For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-35336 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-possible-buffer-overflow-ecdh-calc-secret/ - CVE-2026-50580: Remote buffer overflow in TLS 1.2 ECDHE-PSK client handshake For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50580 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls12-ecdhe-psk-client-buffer-overflow/ - CVE-2026-54435: Side channel leak in ECC optimized modp For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-54435 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-ecc-optimized-modp-side-channel/ - CVE-2026-50586: Information disclosure in TLS 1.2 NewSessionTicket For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50586 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls12-newsessionticket-information-disclosure/ - CVE-2026-50583: Out-of-bounds read when parsing a zero-length ECC public key For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50583 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-zero-length-ecc-public-key-oob-read/ - CVE-2026-50588: Out-of-bounds read in TLS 1.2 EC J-PAKE ServerKeyExchange parsing For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50588 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls12-ecjpake-serverkeyexchange-oob-read/ - CVE-2026-50579: Use-after-free in mbedtls_pkcs7_free() when reusing a PKCS7 context For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50579 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-use-after-free-pkcs7-free-reused-context/ - CVE-2026-54441: Signature algorithm restrictions not enforced on certificate chain For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-54441 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-signature-algorithm-restrictions-certificate-chain/ - CVE-2026-50585: Incomplete context reset in mbedtls_ssl_session_reset() For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50585 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-ssl-session-reset-incomplete-context-reset/ - CVE-2026-73064: A random generator fault can compromise TLS data integrity For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-73064 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-random-generator-fault-tls-integrity/ - CVE-2026-25832: TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-25832 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls13-hrr-unadvertised-group/ - CVE-2026-49300: X.509 CA bit forgery via invalid basicConstraints extension For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-49300 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-x509-ca-bit-forgery-invalid-basicconstraints/ It also fixes the following issue, which has no CVE identifier: - PKCS7 signed data verification accepts weak hash algorithms For more information, see: - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-pkcs7-weak-hash-algorithms-accepted/ Signed-off-by: Yegor Yefremov Assisted-by: Claude:claude-opus-5 Signed-off-by: Julien Olivain (cherry picked from commit 45903c02e328712370b25c756050155c5fbdc5fd) Signed-off-by: Raphaël Mélotte --- package/mbedtls/mbedtls.hash | 4 ++-- package/mbedtls/mbedtls.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/mbedtls/mbedtls.hash b/package/mbedtls/mbedtls.hash index f1be074e08..71c5612b48 100644 --- a/package/mbedtls/mbedtls.hash +++ b/package/mbedtls/mbedtls.hash @@ -1,4 +1,4 @@ -# From https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.6: -sha256 8fb65fae8dcae5840f793c0a334860a411f884cc537ea290ce1c52bb64ca007a mbedtls-3.6.6.tar.bz2 +# From https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.7: +sha256 a7e8bcbec0e6f761b4af24f25677626b35f762f68eef79c08677a363212d11f6 mbedtls-3.6.7.tar.bz2 # Locally calculated sha256 9b405ef4c89342f5eae1dd828882f931747f71001cfba7d114801039b52ad09b LICENSE diff --git a/package/mbedtls/mbedtls.mk b/package/mbedtls/mbedtls.mk index 9def876808..3545c42ad0 100644 --- a/package/mbedtls/mbedtls.mk +++ b/package/mbedtls/mbedtls.mk @@ -4,7 +4,7 @@ # ################################################################################ -MBEDTLS_VERSION = 3.6.6 +MBEDTLS_VERSION = 3.6.7 MBEDTLS_SITE = https://github.com/Mbed-TLS/mbedtls/releases/download/mbedtls-$(MBEDTLS_VERSION) MBEDTLS_SOURCE = mbedtls-$(MBEDTLS_VERSION).tar.bz2 MBEDTLS_CONF_OPTS = \