[openwrt/openwrt] mbedtls: update to 3.6.5

[LEDE Commits]

hauke pushed a commit to openwrt/openwrt.git, branch openwrt-24.10:
https://git.openwrt.org/1a8d3ea89c3ee4c8e109672debe6a70b94522cba

commit 1a8d3ea89c3ee4c8e109672debe6a70b94522cba
Author: Magnus Kroken <mkroken at gmail.com>
AuthorDate: Thu Oct 16 16:11:11 2025 +0200

    mbedtls: update to 3.6.5
    
    This release includes fixes for security issues.
    
    Mbed TLS 3.6 is a long-term support (LTS) branch. It will be supported
    with bug-fixes and security fixes until at least March 2027.
    
    The two issues fixed were timing side channels:
    * Padding oracle through timing of cipher error reporting
      (CVE-2025-59438) [1]
    * Side channel in RSA key generation and operations (SSBleed, M-Step)
      (CVE-2025-54764) [2]
    
    Bug fixes:
    * Fix potential CMake parallel build failure when building both the static and shared libraries.
    * Fix a build error or incorrect TLS session lifetime on platforms where mbedtls_time_t is not time_t.
    
    [1]: https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-invalid-padding-error/
    [2]: https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-ssbleed-mstep/
    
    Full release announcement:
    https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.5
    
    Tested-by: Edoardo Pinci <epinci at outlook.com>
    Signed-off-by: Magnus Kroken <mkroken at gmail.com>
    Link: https://github.com/openwrt/openwrt/pull/20425
    Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
    (cherry picked from commit eb370a7d0230cc2824685d19f28548d81726f2cd)
---
 package/libs/mbedtls/Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/libs/mbedtls/Makefile b/package/libs/mbedtls/Makefile
index d6dc0f7805..cc5c2b78f0 100644
--- a/package/libs/mbedtls/Makefile
+++ b/package/libs/mbedtls/Makefile
@@ -8,13 +8,13 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=mbedtls
-PKG_VERSION:=3.6.4
+PKG_VERSION:=3.6.5
 PKG_RELEASE:=1
 PKG_BUILD_FLAGS:=no-mips16 gc-sections no-lto
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
 PKG_SOURCE_URL=https://github.com/Mbed-TLS/$(PKG_NAME)/releases/download/$(PKG_NAME)-$(PKG_VERSION)
-PKG_HASH:=ec35b18a6c593cf98c3e30db8b98ff93e8940a8c4e690e66b41dfc011d678110
+PKG_HASH:=4a11f1777bb95bf4ad96721cac945a26e04bf19f57d905f241fe77ebeddf46d8
 
 PKG_LICENSE:=GPL-2.0-or-later
 PKG_LICENSE_FILES:=LICENSE