-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 14 Nov 2025 22:00:32 +0200 Source: mbedtls Architecture: source Version: 3.6.5-0.1 Distribution: unstable Urgency: medium Maintainer: Debian IoT Maintainers <debian-iot-maintainers@alioth-lists.debian.net> Changed-By: Adrian Bunk <bunk@debian.org> Closes: 1118750 1118752 Changes: mbedtls (3.6.5-0.1) unstable; urgency=medium . * Non-maintainer upload. * New upstream release. - CVE-2025-54764: Side channel in RSA key generation and operations (Closes: #1118750) - CVE-2025-59438: Padding oracle through timing of cipher error reporting (Closes: #1118752) Checksums-Sha1: e448efb179235c13cbce05a7552a0c3a69a4e885 2458 mbedtls_3.6.5-0.1.dsc 3d6cd31c225129741be7aea004546f081408b998 5367178 mbedtls_3.6.5.orig.tar.bz2 1154ba55e8494d87ca9fdce9b0f9e70ab5733fe6 18804 mbedtls_3.6.5-0.1.debian.tar.xz Checksums-Sha256: a0459578c1cf13c51a972dc0ff61eb26b26a9d074d68957b133cbde263b200a5 2458 mbedtls_3.6.5-0.1.dsc 4a11f1777bb95bf4ad96721cac945a26e04bf19f57d905f241fe77ebeddf46d8 5367178 mbedtls_3.6.5.orig.tar.bz2 1fc7971fe023ed641bce6cc8ef20784c3cd8edb0977e8e066485d9a0ac396c66 18804 mbedtls_3.6.5-0.1.debian.tar.xz Files: fabe053bb2162d0827859dc557dd3874 2458 libs optional mbedtls_3.6.5-0.1.dsc bc79602daf85f1cf35a686b53056de58 5367178 libs optional mbedtls_3.6.5.orig.tar.bz2 3a445d607ebb7fc42e685f3707c8462d 18804 libs optional mbedtls_3.6.5-0.1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmkX1jkACgkQiNJCh6LY mLEKmw/9HR1HFmX30tYxHm6+Lyle7VUGqyBCYO8eyRFw1XSzNWyxZlsEx9Ms4ZE/ QCqjqte+JJil8tYHqLjbzebigd/PiqIfgQ4SeM6B74cCqr/FBEq9NFWOCCm1EJ5O 7d8uOVY1HsKTJqTAn9Yc3hNBecNKq57XMKI1pO4d7qMM0CzexGmHyH+iJUL3KAmq HmNYrs7eOT4deQ/G+ci3zc1O2CXRgy5j2EeS7u6Aa2tC9gl6F5u4T67uZpGXxqva uyA+gPYvFezouc2CXYrmqlSHtA+lG0OEL2LNmMGK+MhLATTbEVBDwIhqytOddIqz 6k7e1KKCnqoB8MxVHVLr1y8GQA2hSveN5F+xUS0r4i9ccVS3XUn8HOeyoTFkdMJt tpjWplYazmmsgfomGZt5AzJx3zFjZSW1AQ68VGl+OavzwhWDpXMGUifjTbXGYX7d lERP6QE354bzqH+jQKLrfJQMLTRqz10tn97JBBNrJWu9meb1LNugBmwVO8bpmfuU wR1stXe3ytd5ZkBhjVVa29qe+T7ZX1O4LB32pNWmeHMMRrYh6H3BP/PV7nwE61CP DJPKl51P1cqvhZ3XwYLDimPVVYm5MA8R/WzNDiTMsFsA9PkYhMNvwp1jx+VRDW2Y wq4pefjPSlpRB7vBWJesllkVSYaVaPMlWDbiEzq1yg2rgrwLr0Y= =yMoj -----END PGP SIGNATURE-----
