Skip to content

Commit

Permalink
wolfssl: bump to 5.4.0 (coolsnowwolf#9795)
Browse files Browse the repository at this point in the history
This version fixes two vulnerabilities:
-CVE-2022-34293[high]: Potential for DTLS DoS attack
-[medium]: Ciphertext side channel attack on ECC and DH operations.

The patch fixing x86 aesni build has been merged upstream.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Co-authored-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
  • Loading branch information
Beginner-Go and cotequeiroz authored Jul 18, 2022
1 parent 2347b04 commit 1399c99
Show file tree
Hide file tree
Showing 4 changed files with 4 additions and 48 deletions.
4 changes: 2 additions & 2 deletions package/libs/wolfssl/Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk

PKG_NAME:=wolfssl
PKG_VERSION:=5.3.0-stable
PKG_VERSION:=5.4.0-stable
PKG_RELEASE:=$(AUTORELEASE)

PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/wolfSSL/wolfssl/archive/v$(PKG_VERSION)
PKG_HASH:=1a3bb310dc01d3e73d9ad91b6ea8249d081016f8eef4ae8f21d3421f91ef1de9
PKG_HASH:=dc36cc19dad197253e5c2ecaa490c7eef579ad448706e55d73d79396e814098b

PKG_FIXUP:=libtool libtool-abiver
PKG_INSTALL:=1
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
--- a/wolfssl/wolfcrypt/settings.h
+++ b/wolfssl/wolfcrypt/settings.h
@@ -2338,7 +2338,7 @@ extern void uITRON4_free(void *p) ;
@@ -2442,7 +2442,7 @@ extern void uITRON4_free(void *p) ;
#endif

/* warning for not using harden build options (default with ./configure) */
Expand Down
2 changes: 1 addition & 1 deletion package/libs/wolfssl/patches/200-ecc-rng.patch
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ RNG regardless of the built settings for wolfssl.

--- a/wolfcrypt/src/ecc.c
+++ b/wolfcrypt/src/ecc.c
@@ -11655,21 +11655,21 @@ void wc_ecc_fp_free(void)
@@ -12288,21 +12288,21 @@ void wc_ecc_fp_free(void)

#endif /* FP_ECC */

Expand Down

This file was deleted.

0 comments on commit 1399c99

Please sign in to comment.