mbedtls 2.2.1-2ubuntu0.2 source package in Ubuntu
Changelog
mbedtls (2.2.1-2ubuntu0.2) xenial-security; urgency=medium
* SECURITY UPDATE: If optional authentication is configured, allows
remote attackers to bypass peer authentication via an X.509 certificate
chain with many intermediates. (LP: #1714640)
- debian/patches/CVE-2017-14032.patch, backport two upstream patches to
return and handle a new "fatal error" error code in case of long
certificate chains.
- CVE-2017-14032
-- James Cowgill <email address hidden> Wed, 06 Sep 2017 21:00:51 +0100
Upload details
- Uploaded by:
- James Cowgill
- Sponsored by:
- Tyler Hicks
- Uploaded to:
- Xenial
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- libs
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| mbedtls_2.2.1.orig.tar.gz | 1.8 MiB | 6ddd5ca2e7dfb43d2fd750400856246fc1c98344dabf01b1594eb2f9880ef7ce |
| mbedtls_2.2.1-2ubuntu0.2.debian.tar.xz | 12.7 KiB | a5a13d82bb613d897d368f5117c8ab69eb1c7e48cf309bc2c5118d7acca32c76 |
| mbedtls_2.2.1-2ubuntu0.2.dsc | 2.2 KiB | 8b9c96993bac207007b4ed55de7629891e077b428582ed70b8d8c4feaf49d0e8 |
Available diffs
Binary packages built by this source
- libmbedcrypto0: lightweight crypto and SSL/TLS library - crypto library
mbed TLS (formerly known as PolarSSL) is a lean open source crypto library for
providing SSL and TLS support in your programs. It offers an intuitive API and
documented header files, so you can actually understand what the code does.
It features:
- Symmetric algorithms, like AES, Blowfish, Triple-DES, DES, ARC4, Camellia
and XTEA
- Hash algorithms, like SHA-1, SHA-2, RIPEMD-160 and MD5
- Entropy pool and random generators, like CTR-DRBG and HMAC-DRBG
- Public key algorithms, like RSA, Elliptic Curves, Diffie-Hellman, ECDSA
and ECDH
- TLS 1.0, 1.1 and 1.2
- Abstraction layers for ciphers, hashes, public key operations, platform
abstraction and threading
.
This package contains the shared library handling cryptography.
- libmbedcrypto0-dbgsym: debug symbols for package libmbedcrypto0
mbed TLS (formerly known as PolarSSL) is a lean open source crypto library for
providing SSL and TLS support in your programs. It offers an intuitive API and
documented header files, so you can actually understand what the code does.
It features:
- Symmetric algorithms, like AES, Blowfish, Triple-DES, DES, ARC4, Camellia
and XTEA
- Hash algorithms, like SHA-1, SHA-2, RIPEMD-160 and MD5
- Entropy pool and random generators, like CTR-DRBG and HMAC-DRBG
- Public key algorithms, like RSA, Elliptic Curves, Diffie-Hellman, ECDSA
and ECDH
- TLS 1.0, 1.1 and 1.2
- Abstraction layers for ciphers, hashes, public key operations, platform
abstraction and threading
.
This package contains the shared library handling cryptography.
- libmbedtls-dev: lightweight crypto and SSL/TLS library - development files
mbed TLS (formerly known as PolarSSL) is a lean open source crypto library for
providing SSL and TLS support in your programs. It offers an intuitive API and
documented header files, so you can actually understand what the code does.
It features:
- Symmetric algorithms, like AES, Blowfish, Triple-DES, DES, ARC4, Camellia
and XTEA
- Hash algorithms, like SHA-1, SHA-2, RIPEMD-160 and MD5
- Entropy pool and random generators, like CTR-DRBG and HMAC-DRBG
- Public key algorithms, like RSA, Elliptic Curves, Diffie-Hellman, ECDSA
and ECDH
- TLS 1.0, 1.1 and 1.2
- Abstraction layers for ciphers, hashes, public key operations, platform
abstraction and threading
.
This package contains the header files for mbed TLS.
- libmbedtls-doc: lightweight crypto and SSL/TLS library - documentation
mbed TLS (formerly known as PolarSSL) is a lean open source crypto library for
providing SSL and TLS support in your programs. It offers an intuitive API and
documented header files, so you can actually understand what the code does.
It features:
- Symmetric algorithms, like AES, Blowfish, Triple-DES, DES, ARC4, Camellia
and XTEA
- Hash algorithms, like SHA-1, SHA-2, RIPEMD-160 and MD5
- Entropy pool and random generators, like CTR-DRBG and HMAC-DRBG
- Public key algorithms, like RSA, Elliptic Curves, Diffie-Hellman, ECDSA
and ECDH
- TLS 1.0, 1.1 and 1.2
- Abstraction layers for ciphers, hashes, public key operations, platform
abstraction and threading
.
This package contains the API documentation.
- libmbedtls10: lightweight crypto and SSL/TLS library - tls library
mbed TLS (formerly known as PolarSSL) is a lean open source crypto library for
providing SSL and TLS support in your programs. It offers an intuitive API and
documented header files, so you can actually understand what the code does.
It features:
- Symmetric algorithms, like AES, Blowfish, Triple-DES, DES, ARC4, Camellia
and XTEA
- Hash algorithms, like SHA-1, SHA-2, RIPEMD-160 and MD5
- Entropy pool and random generators, like CTR-DRBG and HMAC-DRBG
- Public key algorithms, like RSA, Elliptic Curves, Diffie-Hellman, ECDSA
and ECDH
- TLS 1.0, 1.1 and 1.2
- Abstraction layers for ciphers, hashes, public key operations, platform
abstraction and threading
.
This package contains the shared library handling TLS.
- libmbedtls10-dbgsym: debug symbols for package libmbedtls10
mbed TLS (formerly known as PolarSSL) is a lean open source crypto library for
providing SSL and TLS support in your programs. It offers an intuitive API and
documented header files, so you can actually understand what the code does.
It features:
- Symmetric algorithms, like AES, Blowfish, Triple-DES, DES, ARC4, Camellia
and XTEA
- Hash algorithms, like SHA-1, SHA-2, RIPEMD-160 and MD5
- Entropy pool and random generators, like CTR-DRBG and HMAC-DRBG
- Public key algorithms, like RSA, Elliptic Curves, Diffie-Hellman, ECDSA
and ECDH
- TLS 1.0, 1.1 and 1.2
- Abstraction layers for ciphers, hashes, public key operations, platform
abstraction and threading
.
This package contains the shared library handling TLS.
- libmbedx509-0: lightweight crypto and SSL/TLS library - x509 certificate library
mbed TLS (formerly known as PolarSSL) is a lean open source crypto library for
providing SSL and TLS support in your programs. It offers an intuitive API and
documented header files, so you can actually understand what the code does.
It features:
- Symmetric algorithms, like AES, Blowfish, Triple-DES, DES, ARC4, Camellia
and XTEA
- Hash algorithms, like SHA-1, SHA-2, RIPEMD-160 and MD5
- Entropy pool and random generators, like CTR-DRBG and HMAC-DRBG
- Public key algorithms, like RSA, Elliptic Curves, Diffie-Hellman, ECDSA
and ECDH
- TLS 1.0, 1.1 and 1.2
- Abstraction layers for ciphers, hashes, public key operations, platform
abstraction and threading
.
This package contains the shared library handling x509 certificates.
- libmbedx509-0-dbgsym: debug symbols for package libmbedx509-0
mbed TLS (formerly known as PolarSSL) is a lean open source crypto library for
providing SSL and TLS support in your programs. It offers an intuitive API and
documented header files, so you can actually understand what the code does.
It features:
- Symmetric algorithms, like AES, Blowfish, Triple-DES, DES, ARC4, Camellia
and XTEA
- Hash algorithms, like SHA-1, SHA-2, RIPEMD-160 and MD5
- Entropy pool and random generators, like CTR-DRBG and HMAC-DRBG
- Public key algorithms, like RSA, Elliptic Curves, Diffie-Hellman, ECDSA
and ECDH
- TLS 1.0, 1.1 and 1.2
- Abstraction layers for ciphers, hashes, public key operations, platform
abstraction and threading
.
This package contains the shared library handling x509 certificates.
