gpp_maybe Security update for mbedtls-2

openSUSE-2026-213

This update for mbedtls-2 fixes the following issues: - Update to version 2.28.10 (2.28 LTS line), fixing: * CVE-2025-27809: the TLS client accepted certificates valid for arbitrary hostnames unless the application called mbedtls_ssl_set_hostname() (boo#1240051) * CVE-2025-27810: use of uninitialized stack memory when composing the TLS Finished message could lead to an authentication bypass such as a replay (boo#1240052) - Sync packaging with Factory: enable MBEDTLS_SSL_DTLS_SRTP and MBEDTLS_SSL_PROTO_DTLS and ship the everest headers and pkg-config files in the -devel subpackage

• Release Date
  Jun 25 2026
• References
  Bugzilla: 1240051, 1240052
  CVEs: CVE-2025-27810, CVE-2025-27809
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.7 s390x

• Packages
  libmbedcrypto7
  Cryptographic base library for mbedtls

  2.28.10-bp157.2.3.1 lock rpm

  libmbedtls14
  Transport Layer Security protocol suite

  2.28.10-bp157.2.3.1 lock rpm

  libmbedx509-1
  Library to work with X.509 certificates

  2.28.10-bp157.2.3.1 lock rpm

  mbedtls-2-devel
  Development files for mbedtls, a SSL/TLS library

  2.28.10-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 aarch64

• Packages
  libmbedcrypto7
  Cryptographic base library for mbedtls

  2.28.10-bp157.2.3.1 lock rpm

  libmbedtls14
  Transport Layer Security protocol suite

  2.28.10-bp157.2.3.1 lock rpm

  libmbedx509-1
  Library to work with X.509 certificates

  2.28.10-bp157.2.3.1 lock rpm

  mbedtls-2-devel
  Development files for mbedtls, a SSL/TLS library

  2.28.10-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 x86_64

• Packages
  libmbedcrypto7
  Cryptographic base library for mbedtls

  2.28.10-bp157.2.3.1 lock rpm

  libmbedcrypto7-32bit
  Cryptographic base library for mbedtls

  2.28.10-bp157.2.3.1 lock rpm

  libmbedtls14
  Transport Layer Security protocol suite

  2.28.10-bp157.2.3.1 lock rpm

  libmbedtls14-32bit
  Transport Layer Security protocol suite

  2.28.10-bp157.2.3.1 lock rpm

  libmbedx509-1
  Library to work with X.509 certificates

  2.28.10-bp157.2.3.1 lock rpm

  libmbedx509-1-32bit
  Library to work with X.509 certificates

  2.28.10-bp157.2.3.1 lock rpm

  mbedtls-2-devel
  Development files for mbedtls, a SSL/TLS library

  2.28.10-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 ppc64le

• Packages
  libmbedcrypto7
  Cryptographic base library for mbedtls

  2.28.10-bp157.2.3.1 lock rpm

  libmbedtls14
  Transport Layer Security protocol suite

  2.28.10-bp157.2.3.1 lock rpm

  libmbedx509-1
  Library to work with X.509 certificates

  2.28.10-bp157.2.3.1 lock rpm

  mbedtls-2-devel
  Development files for mbedtls, a SSL/TLS library

  2.28.10-bp157.2.3.1 lock rpm