Debian Package Tracker
Register | Log in
Subscribe

mbedtls

Choose email to subscribe with

general
  • source: mbedtls (main)
  • version: 3.6.3-1
  • maintainer: Debian IoT Maintainers (archive) (DMD)
  • uploaders: Andrea Pappacoda [DMD]
  • arch: all any
  • std-ver: 4.7.2
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 2.16.0-1
  • o-o-sec: 2.16.9-0~deb10u1
  • oldstable: 2.16.9-0.1
  • stable: 2.28.3-1
  • testing: 3.6.3-1
  • unstable: 3.6.3-1
versioned links
  • 2.16.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.16.9-0~deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.16.9-0.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.28.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 3.6.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • libmbedcrypto16
  • libmbedtls-dev (1 bugs: 0, 1, 0, 0)
  • libmbedtls-doc
  • libmbedtls21
  • libmbedx509-7
action needed
10 security issues in bullseye high

There are 10 open security issues in bullseye.

2 important issues:
  • CVE-2025-27809: Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.
  • CVE-2025-27810: Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.
7 issues postponed or untriaged:
  • CVE-2021-36647: (needs triaging) Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave such as SGX or the TrustZone secure world) to recover the private keys used in RSA.
  • CVE-2021-43666: (needs triaging) A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.
  • CVE-2022-46392: (needs triaging) An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller.
  • CVE-2024-23170: (needs triaging) An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario.
  • CVE-2024-23775: (needs triaging) Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via mbedtls_x509_set_extension().
  • CVE-2024-28755: (needs triaging) An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When an SSL context was reset with the mbedtls_ssl_session_reset() API, the maximum TLS version to be negotiated was not restored to the configured one. An attacker was able to prevent an Mbed TLS server from establishing any TLS 1.3 connection, potentially resulting in a Denial of Service or forced version downgrade from TLS 1.3 to TLS 1.2.
  • CVE-2024-28960: (needs triaging) An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory.
1 ignored issue:
  • CVE-2022-35409: An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.
2 issues that should be fixed with the next stable update:
  • CVE-2021-24119: In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.
  • CVE-2021-44732: Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.
Created: 2025-03-25 Last update: 2025-05-02 15:30
lintian reports 2 errors high
Lintian reports 2 errors about this package. You should make the package lintian clean getting rid of them.
Created: 2025-04-10 Last update: 2025-04-10 00:31
Does not build reproducibly during testing normal
A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!
Created: 2025-04-12 Last update: 2025-05-28 22:32
6 low-priority security issues in bookworm low

There are 6 open security issues in bookworm.

6 issues left for the package maintainer to handle:
  • CVE-2024-23170: (needs triaging) An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario.
  • CVE-2024-23775: (needs triaging) Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via mbedtls_x509_set_extension().
  • CVE-2024-28755: (needs triaging) An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When an SSL context was reset with the mbedtls_ssl_session_reset() API, the maximum TLS version to be negotiated was not restored to the configured one. An attacker was able to prevent an Mbed TLS server from establishing any TLS 1.3 connection, potentially resulting in a Denial of Service or forced version downgrade from TLS 1.3 to TLS 1.2.
  • CVE-2024-28960: (needs triaging) An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory.
  • CVE-2025-27809: (needs triaging) Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.
  • CVE-2025-27810: (needs triaging) Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.

You can find information about how to handle these issues in the security team's documentation.

Created: 2024-01-22 Last update: 2025-05-02 15:30
Build log checks report 1 warning low
Build log checks report 1 warning
Created: 2018-12-08 Last update: 2018-12-08 07:43
news
[rss feed]
  • [2025-04-08] mbedtls 3.6.3-1 MIGRATED to testing (Debian testing watch)
  • [2025-04-05] Accepted mbedtls 3.6.3-1 (source) into unstable (Andrea Pappacoda)
  • [2024-11-23] mbedtls 3.6.2-3 MIGRATED to testing (Debian testing watch)
  • [2024-11-17] Accepted mbedtls 3.6.2-3 (source) into unstable (Andrea Pappacoda)
  • [2024-11-06] Accepted mbedtls 3.6.2-2 (source) into unstable (Andrea Pappacoda)
  • [2024-10-23] Accepted mbedtls 3.6.2-1 (source) into unstable (Andrea Pappacoda)
  • [2024-10-17] Accepted mbedtls 3.6.0-3 (source) into unstable (Andrea Pappacoda)
  • [2024-04-25] mbedtls 2.28.8-1 MIGRATED to testing (Debian testing watch)
  • [2024-04-10] Accepted mbedtls 3.6.0-2 (source) into experimental (Andrea Pappacoda)
  • [2024-04-08] Accepted mbedtls 3.6.0-1 (source amd64 all) into experimental (Debian FTP Masters) (signed by: bage@debian.org)
  • [2024-03-31] Accepted mbedtls 2.28.8-1 (source) into unstable (Andrea Pappacoda)
  • [2024-02-29] Accepted mbedtls 2.28.7-1.1 (source) into unstable (Graham Inggs)
  • [2024-02-03] Accepted mbedtls 2.28.7-1.1~exp1 (source) into experimental (Graham Inggs)
  • [2024-01-31] mbedtls 2.28.7-1 MIGRATED to testing (Debian testing watch)
  • [2024-01-31] mbedtls 2.28.7-1 MIGRATED to testing (Debian testing watch)
  • [2024-01-27] Accepted mbedtls 2.28.7-1 (source) into unstable (Andrea Pappacoda)
  • [2023-12-27] mbedtls 2.28.6-1 MIGRATED to testing (Debian testing watch)
  • [2023-12-24] Accepted mbedtls 2.28.6-1 (source) into unstable (Andrea Pappacoda)
  • [2023-10-14] mbedtls 2.28.5-1 MIGRATED to testing (Debian testing watch)
  • [2023-10-14] mbedtls 2.28.5-1 MIGRATED to testing (Debian testing watch)
  • [2023-10-11] Accepted mbedtls 2.28.5-1 (source) into unstable (Philippe Coval)
  • [2023-09-14] mbedtls 2.28.4-1 MIGRATED to testing (Debian testing watch)
  • [2023-09-12] Accepted mbedtls 2.28.4-1 (source) into unstable (Andrea Pappacoda)
  • [2023-04-14] mbedtls 2.28.3-1 MIGRATED to testing (Debian testing watch)
  • [2023-03-29] Accepted mbedtls 2.28.3-1 (source) into unstable (Andrea Pappacoda)
  • [2022-12-28] mbedtls 2.28.2-1 MIGRATED to testing (Debian testing watch)
  • [2022-12-25] Accepted mbedtls 2.16.9-0~deb10u1 (source) into oldstable (Markus Koschany)
  • [2022-12-15] Accepted mbedtls 2.28.2-1 (source) into unstable (Andrea Pappacoda)
  • [2022-07-15] mbedtls 2.28.1-1 MIGRATED to testing (Debian testing watch)
  • [2022-07-13] Accepted mbedtls 2.28.1-1 (source) into unstable (Andrea Pappacoda) (signed by: bage@debian.org)
  • 1
  • 2
bugs [bug history graph]
  • all: 4
  • RC: 0
  • I&N: 3
  • M&W: 1
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian (2, 0)
  • buildd: logs, checks, reproducibility, cross
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 3.6.2-3ubuntu1
  • patches for 3.6.2-3ubuntu1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing