gpp_maybe Security update for mbedtls

openSUSE-2026-214

This update for mbedtls fixes the following issues: - Update to the 3.6 LTS line (3.6.6) to fix several security issues; this bumps the SONAMEs (libmbedtls20 -> libmbedtls21, libmbedcrypto15 -> libmbedcrypto16, libmbedx509-6 -> libmbedx509-7): * CVE-2025-49600: possible LMS signature forgery due to unchecked return values in mbedtls_lms_verify (boo#1245808) * CVE-2025-49601: out-of-bounds read in mbedtls_lms_import_public_key on truncated input (boo#1245809) * CVE-2025-52496: race condition in AESNI detection allowing AES key extraction or GCM forgery (boo#1245810) * CVE-2025-52497: one-byte heap buffer underflow in PEM parsing (boo#1245811) * CVE-2025-59438: observable timing discrepancy (padding oracle) in CBC-PKCS7 (boo#1252454) * CVE-2026-34874: NULL pointer dereference in X.509 distinguished-name parsing (boo#1261527) - Ship the pkg-config files in the -devel subpackage

• Release Date
  Jun 25 2026
• References
  Bugzilla: 1245811, 1261527, 1252454, 1245808, 1245809, 1245810
  CVEs: CVE-2026-34874, CVE-2025-59438, CVE-2025-52497, CVE-2025-49600, CVE-2025-52496, CVE-2025-49601
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.7 ppc64le

• Packages
  libeverest
  Library libeverest

  3.6.6-bp157.2.3.1 lock rpm

  libmbedcrypto16
  Cryptographic base library for mbedtls

  3.6.6-bp157.2.3.1 lock rpm

  libmbedtls21
  Transport Layer Security protocol suite

  3.6.6-bp157.2.3.1 lock rpm

  libmbedx509-7
  Library to work with X.509 certificates

  3.6.6-bp157.2.3.1 lock rpm

  libp256m
  Library libp256m

  3.6.6-bp157.2.3.1 lock rpm

  mbedtls-devel
  Development files for mbedtls, a SSL/TLS library

  3.6.6-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 aarch64

• Packages
  libeverest
  Library libeverest

  3.6.6-bp157.2.3.1 lock rpm

  libmbedcrypto16
  Cryptographic base library for mbedtls

  3.6.6-bp157.2.3.1 lock rpm

  libmbedtls21
  Transport Layer Security protocol suite

  3.6.6-bp157.2.3.1 lock rpm

  libmbedx509-7
  Library to work with X.509 certificates

  3.6.6-bp157.2.3.1 lock rpm

  libp256m
  Library libp256m

  3.6.6-bp157.2.3.1 lock rpm

  mbedtls-devel
  Development files for mbedtls, a SSL/TLS library

  3.6.6-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 x86_64

• Packages
  libeverest
  Library libeverest

  3.6.6-bp157.2.3.1 lock rpm

  libeverest-32bit
  Library libeverest

  3.6.6-bp157.2.3.1 lock rpm

  libmbedcrypto16
  Cryptographic base library for mbedtls

  3.6.6-bp157.2.3.1 lock rpm

  libmbedcrypto16-32bit
  Cryptographic base library for mbedtls

  3.6.6-bp157.2.3.1 lock rpm

  libmbedtls21
  Transport Layer Security protocol suite

  3.6.6-bp157.2.3.1 lock rpm

  libmbedtls21-32bit
  Transport Layer Security protocol suite

  3.6.6-bp157.2.3.1 lock rpm

  libmbedx509-7
  Library to work with X.509 certificates

  3.6.6-bp157.2.3.1 lock rpm

  libmbedx509-7-32bit
  Library to work with X.509 certificates

  3.6.6-bp157.2.3.1 lock rpm

  libp256m
  Library libp256m

  3.6.6-bp157.2.3.1 lock rpm

  libp256m-32bit
  Library libp256m

  3.6.6-bp157.2.3.1 lock rpm

  mbedtls-devel
  Development files for mbedtls, a SSL/TLS library

  3.6.6-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 s390x

• Packages
  libeverest
  Library libeverest

  3.6.6-bp157.2.3.1 lock rpm

  libmbedcrypto16
  Cryptographic base library for mbedtls

  3.6.6-bp157.2.3.1 lock rpm

  libmbedtls21
  Transport Layer Security protocol suite

  3.6.6-bp157.2.3.1 lock rpm

  libmbedx509-7
  Library to work with X.509 certificates

  3.6.6-bp157.2.3.1 lock rpm

  libp256m
  Library libp256m

  3.6.6-bp157.2.3.1 lock rpm

  mbedtls-devel
  Development files for mbedtls, a SSL/TLS library

  3.6.6-bp157.2.3.1 lock rpm