Ubuntu
mbedtls package

mbedtls 2.5.1-1ubuntu1 source package in Ubuntu

Changelog

mbedtls (2.5.1-1ubuntu1) artful; urgency=medium

  * SECURITY UPDATE: If optional authentication is configured, allows
    remote attackers to bypass peer authentication via an X.509 certificate
    chain with many intermediates. (LP: #1714640)
    - debian/patches/CVE-2017-14032.patch, backport two upstream patches to
      return and handle a new "fatal error" error code in case of long
      certificate chains.
    - CVE-2017-14032

 -- James Cowgill <email address hidden>  Wed, 06 Sep 2017 21:11:46 -0500

Upload details

Uploaded by:
James Cowgill
Sponsored by:
Simon Quigley
Uploaded to:
Artful
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
mbedtls_2.5.1.orig.tar.gz 1.9 MiB 559aeb8c8941262d6aad96a0286a230e7ff988ba53efbf609230ca1f81cc81f9
mbedtls_2.5.1-1ubuntu1.debian.tar.xz 14.9 KiB a7e6a931bf93081e9026082b05ff862e511647648b29b022d413133fe0aed9ce
mbedtls_2.5.1-1ubuntu1.dsc 2.2 KiB a6e8ccee87f5a68991b5b2fa9877ae0798f7b4bd7ca774c56f29dfd8561cb00e

View changes file

Binary packages built by this source

libmbedcrypto0: No summary available for libmbedcrypto0 in ubuntu artful.

No description available for libmbedcrypto0 in ubuntu artful.

libmbedcrypto0-dbgsym: No summary available for libmbedcrypto0-dbgsym in ubuntu artful.

No description available for libmbedcrypto0-dbgsym in ubuntu artful.

libmbedtls-dev: No summary available for libmbedtls-dev in ubuntu artful.

No description available for libmbedtls-dev in ubuntu artful.

libmbedtls-doc: No summary available for libmbedtls-doc in ubuntu artful.

No description available for libmbedtls-doc in ubuntu artful.

libmbedtls10: No summary available for libmbedtls10 in ubuntu artful.

No description available for libmbedtls10 in ubuntu artful.

libmbedtls10-dbgsym: debug symbols for libmbedtls10
libmbedx509-0: lightweight crypto and SSL/TLS library - x509 certificate library

 mbed TLS (formerly known as PolarSSL) is a lean open source crypto library for
 providing SSL and TLS support in your programs. It offers an intuitive API and
 documented header files, so you can actually understand what the code does.
 It features:
  - Symmetric algorithms, like AES, Blowfish, Triple-DES, DES, ARC4, Camellia
    and XTEA
  - Hash algorithms, like SHA-1, SHA-2, RIPEMD-160 and MD5
  - Entropy pool and random generators, like CTR-DRBG and HMAC-DRBG
  - Public key algorithms, like RSA, Elliptic Curves, Diffie-Hellman, ECDSA
    and ECDH
  - TLS 1.0, 1.1 and 1.2
  - Abstraction layers for ciphers, hashes, public key operations, platform
    abstraction and threading
 .
 This package contains the shared library handling x509 certificates.

libmbedx509-0-dbgsym: No summary available for libmbedx509-0-dbgsym in ubuntu artful.

No description available for libmbedx509-0-dbgsym in ubuntu artful.