Accepting request 1104419 from security:tls

OBS-URL: https://build.opensuse.org/request/show/1104419
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/mbedtls-2?expand=0&rev=3

mbedtls-2.28.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bdf7c5bbdc338da3edad89b2885d4f8668f9a6fffeba6ec17a60333e36dade6f
-size 3952497

mbedtls-2.28.4.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:578c4dcd15bbff3f5cd56aa07cd4f850fc733634e3d5947be4f7157d5bfd81ac
+size 3993397

mbedtls-2.changes

@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Wed Aug 16 18:46:37 UTC 2023 - Scott Bradnick <scott.bradnick@suse.com>
+
+- Update to 2.28.4:
+  Features
+  * Allow MBEDTLS_CONFIG_FILE and MBEDTLS_USER_CONFIG_FILE to be set by
+    setting the CMake variable of the same name at configuration time.
+  Bugfix
+  * Fix crypt_and_hash decryption fail when used with a stream cipher
+    mode of operation, due to the input not being a multiple of the block
+    size. Resolves #7417.
+  * Fix a bug where mbedtls_x509_string_to_names() would return success
+    when given a invalid name string, if it did not contain '=' or ','.
+  * Fix missing PSA initialization in sample programs when
+    MBEDTLS_USE_PSA_CRYPTO is enabled.
+  * Fix clang and armclang compilation error when targeting certain Arm
+    M-class CPUs (Cortex-M0, Cortex-M0+, Cortex-M1, Cortex-M23,
+    SecurCore SC000). Fixes #1077.
+  * Fixed an issue that caused compile errors when using CMake and the IAR
+    toolchain.
+  * Fix the build with MBEDTLS_PSA_INJECT_ENTROPY. Fixes #7516.
+  * Fix builds on Windows with clang.
+  * Fix compilation warnings in aes.c for certain combinations
+    of configuration options.
+  * Fix a compilation error on some platforms when including mbedtls/ssl.h
+    with all TLS support disabled. Fixes #6628.
+  Changes
+  * Update test data to avoid failures of unit tests after 2023-08-07, and
+    update expiring certififcates in the certs 
+
 -------------------------------------------------------------------
 Mon May  8 11:27:53 UTC 2023 - Jaime Marquínez Ferrándiz <jaime.marquinez.ferrandiz@fastmail.net>
 

mbedtls-2.spec

@@ -21,7 +21,7 @@
 %define lib_x509   libmbedx509-1
 %define _rname     mbedtls
 Name:           mbedtls-2
-Version:        2.28.3
+Version:        2.28.4
 Release:        0
 Summary:        Libraries for crypto and SSL/TLS protocols
 License:        Apache-2.0