14 Commits

Author SHA1 Message Date
prspkt
fba3fdbd41 community/mbedtls: upgrade to 2.11.0 2018-07-17 20:20:28 +00:00
Leonardo Arena
44a52d56ef community/mbedtls: security upgrade to 2.7.0
CVE-2017-18187, CVE-2018-0487, CVE-2018-0488

Fixes #8835
2018-06-11 14:20:36 +00:00
Jakub Jirutka
63f5e7d295 [various]: unify names of licenses according to SPDX
This commit updates $license variable in all APKBUILDs to comply with
short names specified by SPDX version 3.0 [1] where possible. It was
done using find-and-replace method on substrings inside $license
variables.

Only license names were updated, not "expressions" specifying relation
between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or
exceptions (e.g. "X with exceptions").

Many licenses have a version or multiple variants, e.g. MPL-2.0,
BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not
contain license version or variant. Since there's no way how to infer
this information just from abuild, it were left without the variant
suffix or version, i.e. non SPDX compliant.

GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They
exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later
(formerly e.g. GPL-2.0+). We did not systematically noted distinguish
between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean
GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g.
GPL2+) were left without the variant suffix, i.e. non SPDX compliant.

Note: This commit just fixes format of the license names, no
verification has been done if the specified license information is
actually correct!

[1]: https://spdx.org/licenses/
2017-12-30 21:05:50 +01:00
Daniel Sabogal
3e293961de community/mbedtls: upgrade to 2.6.1 2017-10-24 15:13:36 -04:00
Daniel Sabogal
358bfd4c68 community/mbedtls: upgrade to 2.6.0 (CVE-2017-14032) 2017-08-31 13:14:04 -04:00
Jakub Jirutka
159bffba0d community/mbedtls: fix perms of *.a files 2017-07-22 14:02:01 +02:00
Jakub Jirutka
a98f0428c2 community/mbedtls: build as MinSizeRel (implies -Os) 2017-07-22 14:02:01 +02:00
Jakub Jirutka
bde61d4897 community/mbedtls: upgrade to 2.5.1 2017-07-22 14:02:01 +02:00
Jakub Jirutka
5844fdc04f community/mbedtls: modernize abuild 2017-07-22 14:02:01 +02:00
André Klitzing
375f5f1839 community/mbedtls: upgrade to 2.4.2 (security fix)
* Fixes CVE-2017-2784
* Add check() function
2017-03-13 12:13:36 +01:00
Stuart Cardall
59fa4b620c community/mbedtls: update to 2.4.1
https://github.com/ARMmbed/mbedtls/blob/development/ChangeLog
2016-12-13 19:45:08 +01:00
Daniel Sabogal
156d008505 community/mbedtls: security upgrade to 2.4.0
With verbosity disabled (default), the testsuite attempts to redirect
stdout by assigning another FILE pointer to it. Enabling verbosity
seems to be the simplest workaround to avoid this code path.
2016-11-04 06:56:59 +00:00
Daniel Sabogal
ef9e7838e9 community/mbedtls: upgrade to 2.3.0 2016-08-15 17:54:31 +00:00
Timo Teräs
0f7bad9455 community/mbedtls: moved from testing 2016-03-18 06:30:11 +00:00