mbedtls: Update to 2.28.9
authorHauke Mehrtens <hauke@hauke-m.de>
Wed, 11 Sep 2024 21:03:50 +0000 (23:03 +0200)
committerRISCi_ATOM <bob@bobcall.me>
Thu, 19 Sep 2024 15:28:34 +0000 (11:28 -0400)
commit8e40b8a6c8b7cef78bb2c5703e2b9b2b973d6027
treec845cc49f2c070ade2ba9c1b001665e3113a858c
parentd0c9845ac85508dc676993cda819255dc7dd142f
mbedtls: Update to 2.28.9

This contains a fix for:
CVE-2024-45157:
Unlike previously documented, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does
not cause the PSA subsystem to use HMAC_DRBG: it uses HMAC_DRBG only when
MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG and MBEDTLS_CTR_DRBG_C are disabled.

Link: https://github.com/openwrt/openwrt/pull/16367
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
package/libs/mbedtls/Makefile
package/libs/mbedtls/patches/100-x509-crt-verify-SAN-iPAddress.patch