Skip to content

Commit ca4854b

Browse files
os-djyao1
authored andcommitted
Update mbedtls to 3.6.2
Mbed TLS 3.6.2 is the latest release in the long-term support 3.6.x series. It brings in some critical security fixes and is the recommended release of Mbed TLS from that community. One of the fixes updates the certifi version referenced by Mbed TLS to one that fixes this CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-37920. CVE scanning tools pick up the version of certifi in Mbed TLS 3.6.0 and report libspdm in violation. Signed-off-by: Oliver Smith-Denny <[email protected]>
1 parent 035c583 commit ca4854b

File tree

4 files changed

+4
-4
lines changed

4 files changed

+4
-4
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -167,7 +167,7 @@ For other architectures, refer to [build](https://github.com/DMTF/libspdm/blob/m
167167

168168
### Cryptography Library
169169

170-
1) [Mbed TLS](https://tls.mbed.org) as cryptography library. Version 3.6.0.
170+
1) [Mbed TLS](https://tls.mbed.org) as cryptography library. Version 3.6.2.
171171

172172
2) [OpenSSL](https://www.openssl.org) as cryptography library. Version 3.0.9.
173173

os_stub/mbedtlslib/include/mbedtls/libspdm_mbedtls_config.h

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3473,7 +3473,7 @@
34733473
*
34743474
* This module adds support for SHA3.
34753475
*/
3476-
/* #define MBEDTLS_SHA3_C */
3476+
#define MBEDTLS_SHA3_C
34773477

34783478
/**
34793479
* \def MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT

os_stub/mbedtlslib/mbedtls

os_stub/mbedtlslib/version.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
3.6.0
1+
3.6.2

0 commit comments

Comments
 (0)