openSUSE-SU-2026:21865-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21865-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21865-1

Upstream

CVE-2026-25832

Related

CVE-2026-25832

Published

2026-09-16T15:52:16Z

Modified

2026-09-17T18:23:14Z

Summary

Security update for mbedtls

Details

This update for mbedtls fixes the following issues:

Changes in mbedtls:

Update to version 3.6.7:
- CVE-2026-25832: TLS 1.3 client accepted HRR selecting unadvertised group (boo#1280186)
- Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected group was not advertised in the original ClientHello

References

Affected packages

openSUSE:Leap 16.0 / mbedtls

Package

Name: mbedtls
Purl: pkg:rpm/opensuse/mbedtls&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.6.7-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "libeverest":  "3.6.7-bp160.1.1",
            "libeverest-x86-64-v3":  "3.6.7-bp160.1.1",
            "libmbedcrypto16":  "3.6.7-bp160.1.1",
            "libmbedcrypto16-x86-64-v3":  "3.6.7-bp160.1.1",
            "libmbedtls21":  "3.6.7-bp160.1.1",
            "libmbedtls21-x86-64-v3":  "3.6.7-bp160.1.1",
            "libmbedx509-7":  "3.6.7-bp160.1.1",
            "libmbedx509-7-x86-64-v3":  "3.6.7-bp160.1.1",
            "libp256m":  "3.6.7-bp160.1.1",
            "libp256m-x86-64-v3":  "3.6.7-bp160.1.1",
            "mbedtls-devel":  "3.6.7-bp160.1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21865-1.json"