Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package mbedtls for openSUSE:Factory checked
in at 2023-10-11 23:56:17
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/mbedtls (Old)
and /work/SRC/openSUSE:Factory/.mbedtls.new.1807 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mbedtls"
Wed Oct 11 23:56:17 2023 rev:41 rq:1116911 version:3.5.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/mbedtls/mbedtls.changes 2023-08-08
15:55:37.801254461 +0200
+++ /work/SRC/openSUSE:Factory/.mbedtls.new.1807/mbedtls.changes
2023-10-12 11:46:29.830520936 +0200
@@ -1,0 +2,2888 @@
+Wed Oct 11 09:49:51 UTC 2023 - Martin Pluskal <mplus...@suse.com>
+
+- Update to version 3.5.0 (resolves bsc#1216078 CVE-2023-45199 and bsc#1216076
CVE-2023-43615):
+ * Updated BRANCHES.MD
+ * Re-assemble changelog to add missing item, plus a couple of typo fixes.
+ * Bump library so-crypto, so-x509, so-tls versions.
+ * Ignore tests of built-in interfaces for driver-only testing parity
+ * Renaming all MBEDTLS_HAVE for curves to MBEDTLS_ECP_HAVE
+ * Auto-generated files for v3.5.0
+ * ChangeLog: Set release date
+ * Prepare ChangeLog for 3.5.0 release
+ * Bump version to 3.5.0
+ * check-generated-files: Added psa_crypto_driver_wrappers_no_static.c file
+ * Changelog: Added entry for psa_crypto_driver_wrappers rename
+ * Remove leftover local debug line
+ * ChangeLog: Added .txt extension to log entries.
+ * Avoid compiler warning about size comparison
+ * Improve some debug messages and error codes
+ * In TLS 1.2, only servers are affected
+ * Changelog entry for xxdh_psa_peerkey size validation
+ * Improve robustness of ECDH public key length validation
+ * Fix buffer overflow in TLS 1.2 ClientKeyExchange parsing
+ * Fix buffer overflow in TLS 1.3 ECDH public key parsing
+ * Add custom config logic to 3rdparty modules
+ * CMake: fix build with 3rdparty module enabled through a custom config
+ * Changelog entry for #7298
+ * Fix ChangeLog entry for FFDH in PSA
+ * Undo not-needed change
+ * Remove redundant code
+ * Assume get_num_ops cannot fail
+ * Always call get_num_ops
+ * Add MBEDTLS_TARGET_PREFIX to 3rdparty CMake
+ * Fix return type
+ * Fix IAR statement is unreachable warning
+ * Fix IAR control bypasses initialisation warning
+ * Fix error handling in psa_driver_wrapper_xxx_hash_get_num_ops
+ * Fix IAR pointless integer comparison
+ * Fix IAR control bypasses initialisation warning
+ * Fix IAR change of sign warning
+ * Remove components that partially accelerate ECC keys
+ * Update list of ECC key types in user-config-for-test.h
+ * Remove spurious comments
+ * Remove generated files in all cmake_as_x tests
+ * Fix lowercase comment start
+ * Formatting fixes
+ * Minor clarifications.
+ * Test only what's support with partial curves accel
+ * Add check for unsupported partial curves acceleration
+ * Add check for unsupported partial key type acceleration
+ * Fix typo: weiErstrass
+ * Use lowercase for local variables
+ * Adjust handling of special case for DERIVE
+ * Rename macros for consistency
+ * Update docs/driver-only-builds.md
+ * Improve documentation about driver-only p256-m.
+ * Remove now-redundant tests
+ * Auto-enable ACCEL macros for p256-m driver
+ * Update list of p256-m entry points
+ * Don't extend support for deprecated functions
+ * Update ChangeLog for ECC.BN EPIC
+ * Ensure tests will fail if CMake generation fails
+ * Update padding const-time fix changelog
+ * Put crypto_spe.h on the include search path where needed
+ * Document that MBEDTLS_PSA_CRYPTO_SPM needs crypto_spe.h
+ * Fix include path to psa/crypto_spe.h
+ * Add CMake include path for generated header
+ * Add ChangeLog entry for change in driver config API
+ * Document limitation on "mixed" builds
+ * Re-add python install of requirements to Travis CI.
+ * Add build with only some ECC key types accelerated
+ * Add build with some curves accelerated but not all
+ * Fix a typo in psa-crypto-implementation-structure.md
+ * Change the documenti about psa_crypto_driver_wrappers.c{h}
+ * No need to include the 3rd party entry point head file
+ * Change the description of auto-generated driver dispatch files
+ * Remove useless spaces in Makefile
+ * Remove useless empty line
+ * Remove the UN_USED_DISABLE attribute
+ * Change to os.path functions base on comment
+ * Move the dependency adjacent to the generated file
+ * Change include guards of psa_crypto_driver_wrappers_no_static.h
+ * Change comments to psa_crypto_driver_wrappers.h
+ * Change the extension type of the file psa_crypto_driver_wrapper
+ * Automaticly generate psa_crypto_driver_wrappers_no_static.c
+ * Dont't generate object file for file only include static functions
+ * Revert 3rd party p-256 entry file
+ * Revert the Makefile to remove the dependency of generate_files
+ * Move functions out of the static file
+ * Change code style
+ * Disable unused warning on visual studio and generate files before lib
+ * Enable build of non-static psa wrapper functions
+ * Move function psa_driver_wrapper_export_public_key out of auto-generated
+ * Remove static inline functions declare and make it only in c file
+ * Ensure build of P256 pass
+ * Surpress the unsed function warnings
+ * Remove useless declaration
+ * Define the psa wrapper functions as static inline
+ * Fix propagation of return value from parse_attribute_value_hex_der_encoded
+ * parse_attribute_value_hex_der_encoded: clean up length validation
+ * parse_attribute_value_hex_der_encoded test case fixups
+ * Add may-fail mode to mbedtls_x509_string_to_names output tests
+ * Fix integer overflow with an input buffer larger than INT_MAX
+ * Fix indentation
+ * Rewrite parse_attribute_value_hex_der_encoded()
+ * More test cases for parse_attribute_value_der_encoded
+ * Use modern test macros for ease of debugging
+ * Rename new header file
+ * Declare P-256 as accelerated in p256-m test
+ * Fix another rebasing mistake
+ * Fix rebasing mistake
+ * Be more subtle about key_type -> alg interaction
+ * Special-case KEYPAIR_DERIVE (no driver support yet)
+ * Fix dependencies of built-in ECC keypair types
+ * Fix deterministic ECDSA built-in dependencies
+ * Use consistent ordering for built-in activation
+ * Declare curves as accelerated in all.sh when needed
+ * Fix logic of ECC built-in activation again
+ * Remove components that are no longer needed
+ * Remove useless instances of MBEDTLS_SOME_BUILTIN_EC
+ * Implement new strategy for ECC accel/built-in
+ * Group all ECC-related things in legacy_from_psa.h
+ * Improve PSA config adjustment relate to keypair types
+ * Remove unnecessary block
+ * psa_crypto: fix guards in mbedtls_ecc_group_to_psa()
+ * adjust_legacy_from_psa: undef SOME_BUILTIN_EC when builtin curves are used
+ * config_psa: resolve symbol redefinition issue
+ * test: fix comment
+ * check_config: remove unnecessary check about builtin curve usage
+ * test_suite_psa_crypto: fix curve dependency in test
+ * Renaming all MBEDTLS_HAVE for curves to MBEDTLS_ECP_HAVE
+ * test: fix comments and functions' naming
+ * ssl: don't require MBEDTLS_ECP_DP with TLS1.3
+ * config_psa: moving PSA_WANT auto-enabling code
+ * config_psa: fix comment
+ * test: fix remaining disparities and remove debug leftovers
+ * test: fix test accelerating all curves keeping only 1 builtin
+ * lib/test: use new internal helpers in library's code and tests
+ * build_info: add helpers to signal some support for a specific curve
+ * check_config: include also ECJPAKE_C as usage for builtin curves
+ * tls/oid: add PSA_WANT_ECC_xxx guards together with existing
MBEDTLS_ECP_DP_xxx
+ * test: fix test which are using accelerated ECC/DH keys
+ * check_config: request at least 1 builtin EC alg if there is at least 1
builtin curve
+ * config_psa: include builtin algs if there is at least 1 builtin curve
+ * config_psa: check curves' support before EC ALGs
+ * config_psa: add internal helper to signal that some curve is builtin
+ * config_psa: ensure PSA_WANT_ECC is enabled for each MBEDTLS_ECP_DP
+ * check_config: fix comment
+ * check_config: perform checks only when config_psa.h is evaluated
+ * check_config: skip check on SECP224K1 because the PSA is never enabled
+ * check_config: verify that each ECP_DP has the corresponding PSA_WANT_ECC
+ * x509_crt: Removed unused intsafe.h
+ * x509_crt: Removed length_as_int intermediate variable
+ * x509_crt: Adjusted the len of lpMultiByteStr arg in WideCharToMultiByte
+ * x509_crt: Set WideCharToMultiByte to use -1 for length.
+ * vs2013 templates: Set bcrypt to be the sole dependency.
+ * x509_crt: Removed checks for windows versions < WINXP
+ * entropy_poll: Removed checks for windows versions < WINXP
+ * ChangeLog: Adjusted the updated_windows_apis log
+ * pkey-random: Removed setting mbedtls_target in libs
+ * entropy_poll: Updated documentation for entropy_poll loop.
+ * program-random: Updated Cmake libs variable
+ * pkey Cmakelists: Updated the set libs to be consistent with others.
+ * entropy_poll.c: Added looping logic to `mbedtls_platform_entropy_poll()`.
+ * ChangeLog.d: Added mininum required Windows version.
+ * Removed unsupported Visual Studio related code in entropy_poll.c and
x509_crt.c.
+ * ChangeLog.d: Reworded updated_windows_apis.txt.
+ * Changelog: Removed entry from root file
+ * entropy_poll/x509_crt: Added MBEDTLS_POP_TARGET_PRAGMA define guards.
+ * library Makefile: Moved -lbcrypt to LOCAL_LDFLAGS
+ * fuzzer Makefile: Added -lbcrypt linkage
+ * Code style fixes
+ * programs: Cleaned up bcrypt linking refererences.
+ * Fix Visual Studio Release|x64 builds
+ * Fix coding style of length_as_int var in x509_crt.c
+ * Remove redundant Visual Studio 6 data files
+ * Add clarifying comment on use of MultiByteToWideChar() and CP_ACP
+ * Fix the tests build with mingw for the new Win32 APIs
+ * Fix formatting and detail of comments in PR #730
+ * Fix for building programs with mingw
+ * Correct check for WIN32 in cmake files for programs
+ * Update ChangeLog for PR #730 for Win32 API fixes
+ * Fix the build for mingw and CMake + VStudio
+ * Replace Windows APIs that are banned in Windows Store apps
+ * Set explicit version for the typing packages
+ * Fix SHA-3 dependencies in test_suite_md
+ * Type fixes and wording improvements
+ * Fix SHA-3 in accel tests that need it
+ * Fix dependencies for SHA-3 MD dispatch tests
+ * Document driver-only hashes
+ * Add SHA-3 support to libtestdriver1
+ * Remove all travis builds except for coverity_scan
+ * Remove invalid comment from mbedtls_cipher_set_padding_mode()
+ * Remove PK options
+ * Set MBEDTLS_MD_C
+ * Update changelog text
+ * Fix test error
+ * Add comment
+ * fix cast warning
+ * Use mbedtls_ct_error_if
+ * Add mbedtls_ct_error_if, with tests
+ * Remove tests for mbedtls_ct_int_if
+ * Remove mbedtls_ct_int_if
+ * Remove use of mbedtls_ct_int_if
+ * Improve implementation of mbedtls_ct_int_if
+ * Update library to use mbedtls_ct_int_if
+ * Improve testing for mbedtls_ct_int_if
+ * Generalise mbedtls_ct_error_if to mbedtls_ct_int_if
+ * Remove unused variable and unreachable return from
mbedtls_pk_write_key_der()
+ * Fix compiler cast warning
+ * Add correct dependencies for AES-192/256 cipher tests
+ * Improve pkparse test dependencies and changelog
+ * Add more tests to check setting padding mode
+ * Add tests for mbedtls_ct_error_if
+ * Fix MSVC error C4703 about possibly uninitialized variable in pkwrite.c
+ * Use mbedtls_ct_error for CT error selection
+ * Add mbedtls_ct_error_if
+ * Reduce size of mbedtls_asn1_get_len
+ * Re-order mbedtls_ccm_context
+ * Changelog for padding CT fixes
+ * Fix code style in pkparse tests
+ * Add PKCS5/12 dependecies to pkparse tests
+ * Add a note about the code size benefits
+ * Rename option where concatenated with -D
+ * Add cast for MSVC
+ * Add test pkparse test dependencies
+ * Add a note about p256m near the option to enable secp256r1
+ * Move MBEDTLS_PSA_P256M_DRIVER_ENABLED to keep alphabetical order
+ * Give a production-sounding name to the p256m option
+ * Add changelog entry for switching pkparse to new pbe functions
+ * Add tests to test pkcs8 parsing of encrypted keys
+ * Fix codestyle issues in pkcs12.h & pkparse.c
+ * Switch pkparse to use new mbedtls_pkcs12_pbe_ext function
+ * Switch pkparse to use new mbedtls_pkcs5_pbes2_ext function
+ * Reinstate more robust return value handling
+ * rename dont_ignore to in_padding
+ * Move declaration for robustness against future edits
+ * Use more meaningful variable name in mbedtls_rsa_rsaes_oaep_decrypt
+ * Correct use of mbedtls_ct_mpi_uint_if_else_0
+ * Fix typo in variable declaration
+ * Work around a race condition in parallel builds
+ * Simplify unnecessarily complex error code handling
+ * Fix documentation of error codes
+ * Improve comments on key formats
+ * Improve return code
+ * Use properly typed versions of mbedtls_ct_xxx_if
+ * Add mbedtls_ct_bool_if and mbedtls_ct_bool_if_else_0
+ * Fix MSVC type complaint
+ * Fix error in handling of return value from mbedtls_nist_kw_unwrap
+ * code style
+ * Fix error in handling of return value from mbedtls_nist_kw_unwrap
+ * Simplify add_zeros_padding
+ * Use CT interface in get_zeros_padding
+ * Rename mbedtls_ct_bool_xor to mbedtls_ct_bool_ne
+ * Use CT interface in get_one_and_zeros_padding
+ * use CT interface in add_zeros_and_len_padding()
+ * Use CT interface in get_pkcs_padding
+ * Use const-time interface throughout mbedtls_rsa_rsaes_oaep_decrypt
+ * Make TEST_CALLOC_NONNULL more robust
+ * Simplify mbedtls_ct_memcmp_partial test
+ * Add docs for mbedtls_ct_memcmp_partial test
+ * Use exact bounds for allocations in mbedtls_ct_memcmp_partial test
+ * Introduce TEST_CALLOC_NONNULL
+ * Remove expected param from mbedtls_ct_memcmp_partial test
+ * Make padlen check const-time
+ * Simplify mbedtls_ct_memcmp_partial
+ * Add correct dependency to DES3 test
+ * Use mbedtls_ct_memcmp in mbedtls_rsa_rsaes_oaep_decrypt
+ * Improve const-timeness of mbedtls_nist_kw_unwrap
+ * Add tests for mbedtls_ct_memcmp_partial
+ * Add mbedtls_ct_memcmp_partial
+ * Eliminate duplicate ct memcmp
+ * mbedtls_ssl_decrypt_buf(): fix buffer overread with stream cipher
+ * Test mbedtls_ssl_decrypt_buf(): stream cipher, negative cases
+ * Adjust cipher tests to new requirement of specifying padding mode
+ * Refactoring: create mbedtls_test_ssl_prepare_record_mac()
+ * Add missing cleanup
+ * Refactoring: prepare to create mbedtls_test_ssl_prepare_record_mac()
+ * Move testing of mbedtls_ssl_decrypt_buf to a new test suite
+ * Add clarifying comment
+ * Fix preset shared between 1.2 and 1.3
+ * Improve a comment
+ * Remove extra copies of a block of comment/define
+ * Fix some issues in comments
+ * Fix issue #8215 : add missing requires documentation in mbedtls_config.h
+ * code style
+ * Fix poorly named function
+ * Remove unneeded setting of ret from ssl programs
+ * Adding changelog for log level message fix
+ * Reduce line size in new pkcs function changelog
+ * code style
+ * Fix some clang-18 warnings
+ * Move MBEDTLS_SSL_MAX_EARLY_DATA_SIZE to the correct section
+ * MBEDTLS_SSL_MAX_EARLY_DATA_SIZE: default value should be commented out in
config
+ * cipher_wrap: remove 192- and 256-bit for AES_ONLY_128_BIT_KEY_LENGTH
+ * Fixes log level for got supported group message
+ * Improve statement in driver-only-builds.md
+ * Add a changelog entry for p256-m
++++ 2591 more lines (skipped)
++++ between /work/SRC/openSUSE:Factory/mbedtls/mbedtls.changes
++++ and /work/SRC/openSUSE:Factory/.mbedtls.new.1807/mbedtls.changes
Old:
----
mbedtls-3.4.1.obscpio
New:
----
mbedtls-3.5.0.obscpio
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ mbedtls.spec ++++++
--- /var/tmp/diff_new_pack.ObE7DP/_old 2023-10-12 11:46:30.606549159 +0200
+++ /var/tmp/diff_new_pack.ObE7DP/_new 2023-10-12 11:46:30.610549306 +0200
@@ -16,15 +16,16 @@
#
-%define lib_tls libmbedtls19
-%define lib_crypto libmbedcrypto14
-%define lib_x509 libmbedx509-5
+%define lib_tls libmbedtls20
+%define lib_crypto libmbedcrypto15
+%define lib_x509 libmbedx509-6
+%define lib_everest libeverest
+%define lib_p256m libp256m
Name: mbedtls
-Version: 3.4.1
+Version: 3.5.0
Release: 0
Summary: Libraries for crypto and SSL/TLS protocols
License: Apache-2.0
-Group: Development/Libraries/C and C++
URL: https://tls.mbed.org
Source: %{name}-%{version}.tar.gz
Source99: baselibs.conf
@@ -45,7 +46,6 @@
%package -n %{lib_tls}
Summary: Transport Layer Security protocol suite
-Group: System/Libraries
%description -n %{lib_tls}
mbedtls implements the SSL 3.0, TLS 1.0, 1.1 and 1.2 protocols. It
@@ -58,7 +58,6 @@
%package -n %{lib_crypto}
Summary: Cryptographic base library for mbedtls
-Group: System/Libraries
%description -n %{lib_crypto}
This subpackage of mbedtls contains a library that exposes
@@ -67,19 +66,31 @@
%package -n %{lib_x509}
Summary: Library to work with X.509 certificates
-Group: System/Libraries
%description -n %{lib_x509}
This subpackage of mbedtls contains a library that can read, verify
and write X.509 certificates, read/write Certificate Signing Requests
and read Certificate Revocation Lists.
+%package -n %{lib_everest}
+Summary: Library libeverest
+
+%description -n %{lib_everest}
+This subpackage of mbedtls contains libeverest
+
+%package -n %{lib_p256m}
+Summary: Library libp256m
+
+%description -n %{lib_p256m}
+This subpackage of mbedtls contains libp256m
+
%package devel
Summary: Development files for mbedtls, a SSL/TLS library
-Group: Development/Libraries/C and C++
Requires: %{lib_crypto} = %{version}
Requires: %{lib_tls} = %{version}
Requires: %{lib_x509} = %{version}
+Requires: %{lib_everest} = %{version}
+Requires: %{lib_p256m} = %{version}
%description devel
This subpackage contains the development files for mbedtls,
@@ -111,22 +122,31 @@
LD_LIBRARY_PATH=%{buildroot}%{_libdir} \
%{_bindir}/ctest --output-on-failure --force-new-ctest-process
-%post -n %{lib_tls} -p /sbin/ldconfig
-%post -n %{lib_crypto} -p /sbin/ldconfig
-%post -n %{lib_x509} -p /sbin/ldconfig
-%postun -n %{lib_tls} -p /sbin/ldconfig
-%postun -n %{lib_crypto} -p /sbin/ldconfig
-%postun -n %{lib_x509} -p /sbin/ldconfig
+%ldconfig_scriptlets -n %{lib_tls}
+%ldconfig_scriptlets -n %{lib_crypto}
+%ldconfig_scriptlets -n %{lib_x509}
+%ldconfig_scriptlets -n %{lib_everest}
+%ldconfig_scriptlets -n %{lib_p256m}
%files devel
%license LICENSE
%doc ChangeLog README.md
%dir %{_includedir}/mbedtls
%dir %{_includedir}/psa
+%dir %{_includedir}/everest
+%dir %{_includedir}/everest/kremlin
+%dir %{_includedir}/everest/kremlin/internal
+%dir %{_includedir}/everest/kremlib
+%dir %{_includedir}/everest/vs2013
%dir %{_libdir}/cmake/MbedTLS
%{_libdir}/cmake/MbedTLS/*
%{_includedir}/mbedtls/*.h
%{_includedir}/psa/*.h
+%{_includedir}/everest/*.h
+%{_includedir}/everest/kremlin/*.h
+%{_includedir}/everest/kremlin/internal/*.h
+%{_includedir}/everest/kremlib/*.h
+%{_includedir}/everest/vs2013/*.h
%{_libdir}/libmbedtls.so
%{_libdir}/libmbedcrypto.so
%{_libdir}/libmbedx509.so
@@ -143,3 +163,11 @@
%license LICENSE
%{_libdir}/libmbedx509.so.*
+%files -n %{lib_everest}
+%license LICENSE
+%{_libdir}/libeverest.so
+
+%files -n %{lib_p256m}
+%license LICENSE
+%{_libdir}/libp256m.so
+
++++++ _service ++++++
--- /var/tmp/diff_new_pack.ObE7DP/_old 2023-10-12 11:46:30.650550781 +0200
+++ /var/tmp/diff_new_pack.ObE7DP/_new 2023-10-12 11:46:30.654550928 +0200
@@ -1,11 +1,11 @@
<services>
- <service name="obs_scm" mode="disabled">
- <param name="versionformat">3.4.1</param>
+ <service name="obs_scm" mode="manual">
+ <param name="versionformat">3.5.0</param>
<param name="url">https://github.com/Mbed-TLS/mbedtls.git</param>
<param name="scm">git</param>
<param name="changesgenerate">enable</param>
<param name="exclude">.*</param>
- <param name="revision">refs/tags/v3.4.1</param>
+ <param name="revision">refs/tags/v3.5.0</param>
</service>
<service name="tar" mode="buildtime"/>
<service name="recompress" mode="buildtime">
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.ObE7DP/_old 2023-10-12 11:46:30.702552698 +0200
+++ /var/tmp/diff_new_pack.ObE7DP/_new 2023-10-12 11:46:30.706552845 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param
name="url">https://github.com/Mbed-TLS/mbedtls.git</param>
- <param
name="changesrevision">72718dd87e087215ce9155a826ee5a66cfbe9631</param></service></servicedata>
+ <param
name="changesrevision">1ec69067fa1351427f904362c1221b31538c8b57</param></service></servicedata>
(No newline at EOF)
++++++ baselibs.conf ++++++
--- /var/tmp/diff_new_pack.ObE7DP/_old 2023-10-12 11:46:30.746554319 +0200
+++ /var/tmp/diff_new_pack.ObE7DP/_new 2023-10-12 11:46:30.750554466 +0200
@@ -1,4 +1,6 @@
-libmbedtls19
-libmbedx509-5
-libmbedcrypto14
+libmbedtls20
+libmbedx509-6
+libmbedcrypto15
+libeverest
+libp256m
++++++ mbedtls-3.4.1.obscpio -> mbedtls-3.5.0.obscpio ++++++
/work/SRC/openSUSE:Factory/mbedtls/mbedtls-3.4.1.obscpio
/work/SRC/openSUSE:Factory/.mbedtls.new.1807/mbedtls-3.5.0.obscpio differ: char
48, line 1
++++++ mbedtls-enable-pthread.patch ++++++
--- /var/tmp/diff_new_pack.ObE7DP/_old 2023-10-12 11:46:30.790555942 +0200
+++ /var/tmp/diff_new_pack.ObE7DP/_new 2023-10-12 11:46:30.794556089 +0200
@@ -1,7 +1,8 @@
-diff -purN a/include/mbedtls/mbedtls_config.h
b/include/mbedtls/mbedtls_config.h
---- a/include/mbedtls/mbedtls_config.h 2023-03-27 19:05:28.000000000 +0200
-+++ b/include/mbedtls/mbedtls_config.h 2023-05-29 19:15:39.917530360 +0200
-@@ -1917,7 +1917,7 @@
+Index: mbedtls-3.5.0/include/mbedtls/mbedtls_config.h
+===================================================================
+--- mbedtls-3.5.0.orig/include/mbedtls/mbedtls_config.h
++++ mbedtls-3.5.0/include/mbedtls/mbedtls_config.h
+@@ -2085,7 +2085,7 @@
*
* Uncomment this to enable pthread mutexes.
*/
@@ -10,9 +11,9 @@
/**
* \def MBEDTLS_USE_PSA_CRYPTO
-@@ -3312,7 +3312,7 @@
+@@ -3522,7 +3522,7 @@
*
- * Enable this layer to allow use of mutexes within mbed TLS
+ * Enable this layer to allow use of mutexes within Mbed TLS
*/
-//#define MBEDTLS_THREADING_C
+#define MBEDTLS_THREADING_C
++++++ mbedtls.obsinfo ++++++
--- /var/tmp/diff_new_pack.ObE7DP/_old 2023-10-12 11:46:30.830557416 +0200
+++ /var/tmp/diff_new_pack.ObE7DP/_new 2023-10-12 11:46:30.834557563 +0200
@@ -1,5 +1,5 @@
name: mbedtls
-version: 3.4.1
-mtime: 1691060708
-commit: 72718dd87e087215ce9155a826ee5a66cfbe9631
+version: 3.5.0
+mtime: 1696459621
+commit: 1ec69067fa1351427f904362c1221b31538c8b57
