CVS commit: pkgsrc/security/mbedtls3

["Jonathan Schleifer" <js%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   js
Date:           Sat Nov 30 18:52:59 UTC 2024

Modified Files:
        pkgsrc/security/mbedtls3: Makefile PLIST distinfo

Log Message:
Update security/mbedtls3 to 3.6.2

Fixes maaaaany CVEs.

3.6 is the new LTS.


To generate a diff of this commit:
cvs rdiff -u -r1.6 -r1.7 pkgsrc/security/mbedtls3/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/security/mbedtls3/PLIST \
    pkgsrc/security/mbedtls3/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/mbedtls3/Makefile
diff -u pkgsrc/security/mbedtls3/Makefile:1.6 pkgsrc/security/mbedtls3/Makefile:1.7
--- pkgsrc/security/mbedtls3/Makefile:1.6       Sun Aug 25 06:19:12 2024
+++ pkgsrc/security/mbedtls3/Makefile   Sat Nov 30 18:52:59 2024
@@ -1,17 +1,15 @@
-# $NetBSD: Makefile,v 1.6 2024/08/25 06:19:12 wiz Exp $
+# $NetBSD: Makefile,v 1.7 2024/11/30 18:52:59 js Exp $
 
-DISTNAME=      mbedtls-3.4.0
+DISTNAME=      mbedtls-3.6.2
 PKGNAME=       ${DISTNAME:S/mbedtls/mbedtls3/}
-PKGREVISION=   1
 CATEGORIES=    security
-MASTER_SITES=  ${MASTER_SITE_GITHUB:=ARMmbed/}
-GITHUB_PROJECT=        mbedtls
-GITHUB_TAG=    ${DISTNAME}
+MASTER_SITES=  ${MASTER_SITE_GITHUB:=Mbed-TLS/mbedtls/releases/download/mbedtls-${PKGVERSION_NOREV}/}
+EXTRACT_SUFX=  .tar.bz2
 
 MAINTAINER=    nia%NetBSD.org@localhost
 HOMEPAGE=      https://tls.mbed.org/
 COMMENT=       Lightweight, modular cryptographic and SSL/TLS library (3.x branch)
-LICENSE=       apache-2.0
+LICENSE=       apache-2.0 OR gnu-gpl-v2
 
 CONFLICTS+=    mbedtls-[0-9]*
 CONFLICTS+=    polarssl-[0-9]*
@@ -27,7 +25,7 @@ CMAKE_CONFIGURE_ARGS+=        -DUSE_SHARED_MBED
 CMAKE_CONFIGURE_ARGS+= -DENABLE_PROGRAMS=ON
 
 # Fails to build full suite on NetBSD due to strange tricks with stdout
-CMAKE_CONFIGURE_ARGS+= -DENABLE_TESTING=OFF
+CMAKE_CONFIGURE_ARGS.NetBSD+=  -DENABLE_TESTING=OFF
 
 CMAKE_CONFIGURE_ARGS+= -DMBEDTLS_FATAL_WARNINGS=OFF
 

Index: pkgsrc/security/mbedtls3/PLIST
diff -u pkgsrc/security/mbedtls3/PLIST:1.2 pkgsrc/security/mbedtls3/PLIST:1.3
--- pkgsrc/security/mbedtls3/PLIST:1.2  Tue Apr 25 21:39:51 2023
+++ pkgsrc/security/mbedtls3/PLIST      Sat Nov 30 18:52:59 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2023/04/25 21:39:51 wiz Exp $
+@comment $NetBSD: PLIST,v 1.3 2024/11/30 18:52:59 js Exp $
 bin/mbedtls_aead_demo
 bin/mbedtls_benchmark
 bin/mbedtls_cert_app
@@ -27,6 +27,7 @@ bin/mbedtls_key_ladder_demo
 bin/mbedtls_key_ladder_demo.sh
 bin/mbedtls_load_roots
 bin/mbedtls_md_hmac_demo
+bin/mbedtls_metatest
 bin/mbedtls_mini_client
 bin/mbedtls_mpi_demo
 bin/mbedtls_pem2der
@@ -35,6 +36,7 @@ bin/mbedtls_pk_encrypt
 bin/mbedtls_pk_sign
 bin/mbedtls_pk_verify
 bin/mbedtls_psa_constant_names
+bin/mbedtls_psa_hash
 bin/mbedtls_query_compile_time_config
 bin/mbedtls_query_included_headers
 bin/mbedtls_req_app
@@ -57,12 +59,30 @@ bin/mbedtls_ssl_server2
 bin/mbedtls_strerror
 bin/mbedtls_udp_proxy
 bin/mbedtls_zeroize
+include/everest/Hacl_Curve25519.h
+include/everest/everest.h
+include/everest/kremlib.h
+include/everest/kremlib/FStar_UInt128.h
+include/everest/kremlib/FStar_UInt64_FStar_UInt32_FStar_UInt16_FStar_UInt8.h
+include/everest/kremlin/c_endianness.h
+include/everest/kremlin/internal/builtin.h
+include/everest/kremlin/internal/callconv.h
+include/everest/kremlin/internal/compat.h
+include/everest/kremlin/internal/debug.h
+include/everest/kremlin/internal/target.h
+include/everest/kremlin/internal/types.h
+include/everest/kremlin/internal/wasmsupport.h
+include/everest/vs2013/Hacl_Curve25519.h
+include/everest/vs2013/inttypes.h
+include/everest/vs2013/stdbool.h
+include/everest/x25519.h
 include/mbedtls/aes.h
 include/mbedtls/aria.h
 include/mbedtls/asn1.h
 include/mbedtls/asn1write.h
 include/mbedtls/base64.h
 include/mbedtls/bignum.h
+include/mbedtls/block_cipher.h
 include/mbedtls/build_info.h
 include/mbedtls/camellia.h
 include/mbedtls/ccm.h
@@ -72,6 +92,12 @@ include/mbedtls/check_config.h
 include/mbedtls/cipher.h
 include/mbedtls/cmac.h
 include/mbedtls/compat-2.x.h
+include/mbedtls/config_adjust_legacy_crypto.h
+include/mbedtls/config_adjust_legacy_from_psa.h
+include/mbedtls/config_adjust_psa_from_legacy.h
+include/mbedtls/config_adjust_psa_superset_legacy.h
+include/mbedtls/config_adjust_ssl.h
+include/mbedtls/config_adjust_x509.h
 include/mbedtls/config_psa.h
 include/mbedtls/constant_time.h
 include/mbedtls/ctr_drbg.h
@@ -87,7 +113,6 @@ include/mbedtls/error.h
 include/mbedtls/gcm.h
 include/mbedtls/hkdf.h
 include/mbedtls/hmac_drbg.h
-include/mbedtls/legacy_or_psa.h
 include/mbedtls/lms.h
 include/mbedtls/mbedtls_config.h
 include/mbedtls/md.h
@@ -111,6 +136,7 @@ include/mbedtls/ripemd160.h
 include/mbedtls/rsa.h
 include/mbedtls/sha1.h
 include/mbedtls/sha256.h
+include/mbedtls/sha3.h
 include/mbedtls/sha512.h
 include/mbedtls/ssl.h
 include/mbedtls/ssl_cache.h
@@ -124,15 +150,23 @@ include/mbedtls/x509.h
 include/mbedtls/x509_crl.h
 include/mbedtls/x509_crt.h
 include/mbedtls/x509_csr.h
+include/psa/build_info.h
 include/psa/crypto.h
+include/psa/crypto_adjust_auto_enabled.h
+include/psa/crypto_adjust_config_dependencies.h
+include/psa/crypto_adjust_config_key_pair_types.h
+include/psa/crypto_adjust_config_synonyms.h
 include/psa/crypto_builtin_composites.h
+include/psa/crypto_builtin_key_derivation.h
 include/psa/crypto_builtin_primitives.h
 include/psa/crypto_compat.h
 include/psa/crypto_config.h
 include/psa/crypto_driver_common.h
 include/psa/crypto_driver_contexts_composites.h
+include/psa/crypto_driver_contexts_key_derivation.h
 include/psa/crypto_driver_contexts_primitives.h
 include/psa/crypto_extra.h
+include/psa/crypto_legacy.h
 include/psa/crypto_platform.h
 include/psa/crypto_se_driver.h
 include/psa/crypto_sizes.h
@@ -143,15 +177,20 @@ lib/cmake/MbedTLS/MbedTLSConfig.cmake
 lib/cmake/MbedTLS/MbedTLSConfigVersion.cmake
 lib/cmake/MbedTLS/MbedTLSTargets-noconfig.cmake
 lib/cmake/MbedTLS/MbedTLSTargets.cmake
+lib/libeverest.a
 lib/libmbedcrypto.a
 lib/libmbedcrypto.so
-lib/libmbedcrypto.so.14
+lib/libmbedcrypto.so.16
 lib/libmbedcrypto.so.${PKGVERSION}
 lib/libmbedtls.a
 lib/libmbedtls.so
-lib/libmbedtls.so.19
+lib/libmbedtls.so.21
 lib/libmbedtls.so.${PKGVERSION}
 lib/libmbedx509.a
 lib/libmbedx509.so
 lib/libmbedx509.so.${PKGVERSION}
-lib/libmbedx509.so.5
+lib/libmbedx509.so.7
+lib/libp256m.a
+lib/pkgconfig/mbedcrypto.pc
+lib/pkgconfig/mbedtls.pc
+lib/pkgconfig/mbedx509.pc
Index: pkgsrc/security/mbedtls3/distinfo
diff -u pkgsrc/security/mbedtls3/distinfo:1.2 pkgsrc/security/mbedtls3/distinfo:1.3
--- pkgsrc/security/mbedtls3/distinfo:1.2       Tue Apr 25 21:39:51 2023
+++ pkgsrc/security/mbedtls3/distinfo   Sat Nov 30 18:52:59 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.2 2023/04/25 21:39:51 wiz Exp $
+$NetBSD: distinfo,v 1.3 2024/11/30 18:52:59 js Exp $
 
-BLAKE2s (mbedtls-3.4.0.tar.gz) = e2011501c6361ef9f519fc31dbbc7674a9316267eb462db4fbf158c3ff1e784b
-SHA512 (mbedtls-3.4.0.tar.gz) = bfaacb9cf8cd90b8cdf7d606d5e53f4de5700f98b75e60530b90cc8a082663e169e34215d046e6228718979fb12066c032d00532e264adc9a7129b80107657d2
-Size (mbedtls-3.4.0.tar.gz) = 4892060 bytes
+BLAKE2s (mbedtls-3.6.2.tar.bz2) = 8beecad1021831d31d963f68f202d83d1a835f40e1de5552bbb08e7b929a198a
+SHA512 (mbedtls-3.6.2.tar.bz2) = 7ab3b1ec179681949e1b0d171e04f75a605ae9ed8177cf3f6f27c401efca4aff930437ecc425c9a994d36f50ddd6f0f0dd7feeb42251128ac875b4c57fe3811b
+Size (mbedtls-3.6.2.tar.bz2) = 4979769 bytes