Uploaded image for project: 'Core ReactOS'
  1. Core ReactOS
  2. CORE-10318

Update mbedTLS to 2.1.2

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Fix Version/s: 0.4.0
    • Component/s: Networking
    • Labels:

      Description

      Looks like it's time to update. They have found a bunch of security problems by themselves.

      Even if we don't make use of ticket reuse or any of the other problematic modules, and the only thing that could affect our schannel implementation theoretically is the lack of sizeof(hostname) < 255 bounds checking.

      Anyway, updating a library like this is always a good idea.

      References:

      Used package: https://tls.mbed.org/download/mbedtls-2.1.2-apache.tgz with SHA-1 c99dfeaa27489f0e74e704e69a181f6ceb3db2a7.

      AmineKhaldi: Subscribing to their mailing list for updates might be also a good idea, just in case: https://tls.mbed.org/subscribe

        Attachments

          Activity

            People

            • Assignee:
              AmineKhaldi AmineKhaldi
              Reporter:
              Swyter Swyter
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: