mbedtls: upgrade 3.6.3.1 -> 3.6.4

Fixes several security vulnerabilities:
CVE-2025-49601, CVE-2025-49600, CVE-2025-52496,
CVE-2025-47917, CVE-2025-48965, CVE-2025-52497,
and CVE-2025-49087

The framework directory has been changed into a git submodule.[1][2]
The recipe now uses Git Submodule Fetcher (gitsm)

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4

[1] 8cf5666a17
[2] c90c6d8ff7

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Guðni Már Gilbert 2025-07-16 11:50:31 +00:00 committed by Khem Raj
parent 1c9490d376
commit b9bf053c44
No known key found for this signature in database
GPG Key ID: BB053355919D3314

View File

@ -22,11 +22,11 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=379d5819937a6c2f1ef1630d341e026d"
SECTION = "libs"
SRC_URI = "git://github.com/Mbed-TLS/mbedtls.git;protocol=https;branch=main;tag=v${PV} \
SRC_URI = "gitsm://github.com/Mbed-TLS/mbedtls.git;protocol=https;branch=mbedtls-3.6;tag=v${PV} \
file://run-ptest \
"
SRCREV = "6fb5120fde4ab889bea402f5ab230c720b0a3b9a"
SRCREV = "c765c831e5c2a0971410692f92f7a81d6ec65ec2"
UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>\d+(\.\d+)+)"