mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-24 01:42:07 -09:00
08c78948dd
For more information about the release, see:
- https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.7
- https://github.com/Mbed-TLS/mbedtls/compare/mbedtls-3.6.6..mbedtls-3.6.7
Fixes the following vulnerabilities:
- CVE-2026-50587:
Timing side-channel in RSA PKCS#1 v1.5 decryption
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50587
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-rsa-pkcs1-v15-decryption-timing-side-channel/
- CVE-2026-50581:
Extended master secret calculation failure ignored
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50581
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-extended-master-secret-calculation-failure-ignored/
- CVE-2026-50640:
Ignored TLS 1.3 resumption secret derivation error
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50640
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-ignored-tls13-resumption-secret-derivation-error/
- CVE-2026-50713:
Heap corruption with early renegotiation after corrupted record
in DTLS
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50713
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-heap-corruption-early-renegotiation-corrupted-dtls-record/
- CVE-2026-50584:
ChaCha20 counter overflow can reuse keystream
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50584
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-chacha20-counter-overflow-keystream-reuse/
- CVE-2026-73096:
TLS 1.3 early data integrity failure due to buffered plaintext
across key change
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-73096
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls13-early-data-integrity-failure-key-change/
- CVE-2026-35336:
Possible buffer overflow in mbedtls_ecdh_calc_secret()
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-35336
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-possible-buffer-overflow-ecdh-calc-secret/
- CVE-2026-50580:
Remote buffer overflow in TLS 1.2 ECDHE-PSK client handshake
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50580
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls12-ecdhe-psk-client-buffer-overflow/
- CVE-2026-54435:
Side channel leak in ECC optimized modp
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-54435
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-ecc-optimized-modp-side-channel/
- CVE-2026-50586:
Information disclosure in TLS 1.2 NewSessionTicket
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50586
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls12-newsessionticket-information-disclosure/
- CVE-2026-50583:
Out-of-bounds read when parsing a zero-length ECC public key
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50583
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-zero-length-ecc-public-key-oob-read/
- CVE-2026-50588:
Out-of-bounds read in TLS 1.2 EC J-PAKE ServerKeyExchange
parsing
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50588
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls12-ecjpake-serverkeyexchange-oob-read/
- CVE-2026-50579:
Use-after-free in mbedtls_pkcs7_free() when reusing a PKCS7
context
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50579
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-use-after-free-pkcs7-free-reused-context/
- CVE-2026-54441:
Signature algorithm restrictions not enforced on certificate
chain
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-54441
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-signature-algorithm-restrictions-certificate-chain/
- CVE-2026-50585:
Incomplete context reset in mbedtls_ssl_session_reset()
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-50585
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-ssl-session-reset-incomplete-context-reset/
- CVE-2026-73064:
A random generator fault can compromise TLS data integrity
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-73064
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-random-generator-fault-tls-integrity/
- CVE-2026-25832:
TLS 1.3 client accepts HelloRetryRequest selecting an
unadvertised group
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-25832
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls13-hrr-unadvertised-group/
- CVE-2026-49300:
X.509 CA bit forgery via invalid basicConstraints extension
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-49300
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-x509-ca-bit-forgery-invalid-basicconstraints/
It also fixes the following issue, which has no CVE identifier:
- PKCS7 signed data verification accepts weak hash algorithms
For more information, see:
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-pkcs7-weak-hash-algorithms-accepted/
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Assisted-by: Claude:claude-opus-5
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 45903c02e3)
Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at https://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on OFTC IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches