mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-22 00:41:55 -09:00
45903c02e3
For more information about the release, see: - https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.7 - https://github.com/Mbed-TLS/mbedtls/compare/mbedtls-3.6.6..mbedtls-3.6.7 Fixes the following vulnerabilities: - CVE-2026-50587: Timing side-channel in RSA PKCS#1 v1.5 decryption For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50587 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-rsa-pkcs1-v15-decryption-timing-side-channel/ - CVE-2026-50581: Extended master secret calculation failure ignored For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50581 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-extended-master-secret-calculation-failure-ignored/ - CVE-2026-50640: Ignored TLS 1.3 resumption secret derivation error For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50640 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-ignored-tls13-resumption-secret-derivation-error/ - CVE-2026-50713: Heap corruption with early renegotiation after corrupted record in DTLS For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50713 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-heap-corruption-early-renegotiation-corrupted-dtls-record/ - CVE-2026-50584: ChaCha20 counter overflow can reuse keystream For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50584 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-chacha20-counter-overflow-keystream-reuse/ - CVE-2026-73096: TLS 1.3 early data integrity failure due to buffered plaintext across key change For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-73096 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls13-early-data-integrity-failure-key-change/ - CVE-2026-35336: Possible buffer overflow in mbedtls_ecdh_calc_secret() For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-35336 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-possible-buffer-overflow-ecdh-calc-secret/ - CVE-2026-50580: Remote buffer overflow in TLS 1.2 ECDHE-PSK client handshake For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50580 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls12-ecdhe-psk-client-buffer-overflow/ - CVE-2026-54435: Side channel leak in ECC optimized modp For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-54435 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-ecc-optimized-modp-side-channel/ - CVE-2026-50586: Information disclosure in TLS 1.2 NewSessionTicket For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50586 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls12-newsessionticket-information-disclosure/ - CVE-2026-50583: Out-of-bounds read when parsing a zero-length ECC public key For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50583 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-zero-length-ecc-public-key-oob-read/ - CVE-2026-50588: Out-of-bounds read in TLS 1.2 EC J-PAKE ServerKeyExchange parsing For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50588 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls12-ecjpake-serverkeyexchange-oob-read/ - CVE-2026-50579: Use-after-free in mbedtls_pkcs7_free() when reusing a PKCS7 context For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50579 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-use-after-free-pkcs7-free-reused-context/ - CVE-2026-54441: Signature algorithm restrictions not enforced on certificate chain For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-54441 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-signature-algorithm-restrictions-certificate-chain/ - CVE-2026-50585: Incomplete context reset in mbedtls_ssl_session_reset() For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-50585 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-ssl-session-reset-incomplete-context-reset/ - CVE-2026-73064: A random generator fault can compromise TLS data integrity For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-73064 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-random-generator-fault-tls-integrity/ - CVE-2026-25832: TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-25832 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls13-hrr-unadvertised-group/ - CVE-2026-49300: X.509 CA bit forgery via invalid basicConstraints extension For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-49300 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-x509-ca-bit-forgery-invalid-basicconstraints/ It also fixes the following issue, which has no CVE identifier: - PKCS7 signed data verification accepts weak hash algorithms For more information, see: - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-pkcs7-weak-hash-algorithms-accepted/ Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com> Assisted-by: Claude:claude-opus-5 Signed-off-by: Julien Olivain <ju.o@free.fr>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at https://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on OFTC IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches