mbedtls (3.6.5-0.1~deb13u1) trixie; urgency=medium
* Non-maintainer upload.
* Rebuild for trixie.
-- Adrian Bunk <bunk@debian.org> Fri, 02 Jan 2026 23:05:58 +0200
mbedtls (3.6.5-0.1) unstable; urgency=medium
* Non-maintainer upload.
* New upstream release.
- CVE-2025-54764: Side channel in RSA key generation and operations
(Closes: #1118750)
- CVE-2025-59438: Padding oracle through timing of cipher error reporting
(Closes: #1118752)
-- Adrian Bunk <bunk@debian.org> Fri, 14 Nov 2025 22:00:32 +0200
mbedtls (3.6.4-2) unstable; urgency=medium
* d/libmbedtls21.symbols: add new 3.6.4 symbols
-- Andrea Pappacoda <tachi@debian.org> Mon, 14 Jul 2025 15:19:49 +0200
mbedtls (3.6.4-1) unstable; urgency=medium
* New upstream version 3.6.4
- Closes: #1108785 (CVE-2025-52496)
- Closes: #1108786 (CVE-2025-52497)
- Closes: #1108787 (CVE-2025-49600)
- Closes: #1108788 (CVE-2025-49601)
-- Andrea Pappacoda <tachi@debian.org> Sun, 13 Jul 2025 13:26:04 +0200
mbedtls (3.6.3-1) unstable; urgency=medium
* New upstream version 3.6.3
- Fixes CVE-2025-27809
- Fixes CVE-2025-27810
- Closes: #1101499
* d/control: use my @debian.org email address
* d/control: apply X-Style: black
* d/control: declare dpkg-build-api = 1
* d/.symbols: mark private symbol as optional, add new ones
-- Andrea Pappacoda <tachi@debian.org> Sat, 05 Apr 2025 15:45:07 +0200
mbedtls (3.6.2-3) unstable; urgency=medium
[ Reinhard Tartler ]
* Update 100-fix-gcc14-build to patch the correct file
-- Andrea Pappacoda <andrea@pappacoda.it> Sun, 17 Nov 2024 18:23:19 +0100
mbedtls (3.6.2-2) unstable; urgency=medium
* d/patches: fix builds with GCC 14.
Thanks to Adrian, Christian, and Emilio for the report! (Closes: #1085354)
-- Andrea Pappacoda <andrea@pappacoda.it> Wed, 06 Nov 2024 12:54:54 +0100
mbedtls (3.6.2-1) unstable; urgency=low
* New upstream version 3.6.2
* d/.symbols: add new symbols, mark private as optional
* d/watch: fixup checking of new 3.6 releases
-- Andrea Pappacoda <andrea@pappacoda.it> Mon, 21 Oct 2024 16:25:05 +0200
mbedtls (3.6.0-3) unstable; urgency=medium
* Upload to unstable
-- Andrea Pappacoda <andrea@pappacoda.it> Thu, 17 Oct 2024 23:06:32 +0200
mbedtls (3.6.0-2) experimental; urgency=medium
* d/.symbols: mark aesni symbols as x86-only
-- Andrea Pappacoda <andrea@pappacoda.it> Wed, 10 Apr 2024 07:27:06 +0200
mbedtls (3.6.0-1) experimental; urgency=medium
* New upstream version 3.6.0
- TLS 1.3 enabled by default. Closes: #971393
- MBEDTLS_NIST_KW_C enabled by default. Closes: #1053533
- Fixes CVE-2024-28960 (fixed in 2.28.8 too)
* d/control: new SONAME, new packages
* d/copyright: document Project Everest copyright
* d/libmbedtls-dev.install: install new CMake Config files (Closes: #1036231)
* d/patches: skip compiling 3rdparty code
* d/tests: test new CMake Config files
* d/tests/selftest: use the new pkg-config files
* d/watch: switch to 3.6.x LTS branch
* d/watch: use official release tarball
-- Andrea Pappacoda <andrea@pappacoda.it> Mon, 01 Apr 2024 22:55:20 +0200
mbedtls (2.28.8-1) unstable; urgency=medium
* New upstream version 2.28.8
* d/libmbedtls-dev.install: install new pkg-config files (Closes: #900015)
* d/.symbols: add new PSA symbols
-- Andrea Pappacoda <andrea@pappacoda.it> Sun, 31 Mar 2024 20:02:32 +0200
mbedtls (2.28.7-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition. Closes: #1062859
-- Graham Inggs <ginggs@debian.org> Thu, 29 Feb 2024 12:19:38 +0000
mbedtls (2.28.7-1) unstable; urgency=medium
* New upstream version 2.28.7
- Fixes CVE-2024-23170
- Fixes CVE-2024-23775
* d/libmbedcrypto7.symbols: add new MPI symbols
-- Andrea Pappacoda <andrea@pappacoda.it> Sat, 27 Jan 2024 13:12:37 +0100
mbedtls (2.28.6-1) unstable; urgency=medium
* New upstream version 2.28.6
* d/copyright: now available under Apache-2.0 or GPL-2+
* d/copyright: update debian/ copyright information
-- Andrea Pappacoda <andrea@pappacoda.it> Mon, 20 Nov 2023 09:34:09 +0100
mbedtls (2.28.5-1) unstable; urgency=medium
* Team upload.
* debian/control: Update URL to use team's git
* New upstream version 2.28.5
* debian/libmbedcrypto7.symbols: Fix symbols for lintian
-- Philippe Coval <rzr@users.sf.net> Wed, 11 Oct 2023 19:57:04 +0200
mbedtls (2.28.4-1) unstable; urgency=medium
* New upstream version 2.28.4
* d/control: switch ownership to the Debian IoT Team
-- Andrea Pappacoda <andrea@pappacoda.it> Fri, 18 Aug 2023 11:41:40 +0200
mbedtls (2.28.3-1) unstable; urgency=medium
* New upstream version 2.28.3
We are now in the bookworm hard freeze, but I still think that releasing
this now is sensible. Importing new upstream LTS releases is the only way
of properly backporting mbedtls' security fixes, so this release should be
ported to bookworm, sooner or later.
* d/{control,rules}: honour nocheck and nodoc profiles
-- Andrea Pappacoda <andrea@pappacoda.it> Wed, 29 Mar 2023 21:39:41 +0200
mbedtls (2.28.2-1) unstable; urgency=medium
* New upstream version 2.28.2
* d/rules: remove .map files from libmbedtls-doc.
Thanks to Dennis Filder for reporting
-- Andrea Pappacoda <andrea@pappacoda.it> Thu, 15 Dec 2022 22:02:03 +0100
mbedtls (2.28.1-1) unstable; urgency=medium
* New upstream version 2.28.1
- Fixes CVE-2022-35409
* d/libmbedtls14.symbols: add mbedtls_ssl_check_curve_tls_id
-- Andrea Pappacoda <andrea@pappacoda.it> Tue, 12 Jul 2022 22:58:03 +0200
mbedtls (2.28.0-2) unstable; urgency=medium
* d/copyright: add Upstream-Contact
* Update upstream Git repository URL
* Fix build reproducibility
* Fix cross compilation
* CVE-2021-43666 fixed in 2.28.0
-- Andrea Pappacoda <andrea@pappacoda.it> Sun, 03 Apr 2022 12:22:05 +0200
mbedtls (2.28.0-1) unstable; urgency=medium
* Upload version 2.28 to unstable
* d/control: set myself as the Maintainer. Closes: #1004647
* d/rules: make builds reproducible
-- Andrea Pappacoda <andrea@pappacoda.it> Wed, 16 Feb 2022 11:52:38 +0100
mbedtls (2.28.0-0.3) unstable; urgency=medium
* Non-maintainer upload.
* Upload to unstable
-- Andrea Pappacoda <andrea@pappacoda.it> Wed, 16 Feb 2022 16:38:59 +0000
mbedtls (2.28.0-0.2) experimental; urgency=medium
* Non-maintainer upload
* d/copyright: MbedTLS is now Apache-2.0 only
* d/libmbedcrypto7.symbols: mark arch-dependent symbols
* d/watch: fix LTS watch
-- Andrea Pappacoda <andrea@pappacoda.it> Sun, 16 Jan 2022 21:45:45 +0100
mbedtls (2.28.0-0.1) experimental; urgency=medium
* Non-maintainer upload
* New upstream release
- CVE-2021-44732. Closes: #1002631
- CVE-2020-36477 fixed in 2.24.0
* Enable CMAC support. Closes: #994681
* Enable DTLS SRTP support. Closes: #1001862
* Rename libraries due to upstream SONAME bump
* d/libmbed{crypto,tls}*.symbols:
- Update all symbol versions to 2.28
* d/watch: use GitHub's API, look only for LTS releases
-- Andrea Pappacoda <andrea@pappacoda.it> Mon, 27 Dec 2021 15:17:15 +0100
mbedtls (2.16.11-0.3) unstable; urgency=medium
* Non-maintainer upload
* Drop CMAC support as it breaks ABI compat. Closes #1000289
- Updated libmbedcrypto3.symbols
* CVE-2021-24119 fixed in 2.16.10
-- Andrea Pappacoda <andrea@pappacoda.it> Fri, 26 Nov 2021 16:53:38 +0100
mbedtls (2.16.11-0.2) unstable; urgency=medium
* Non-maintainer upload.
[ Steve Langasek ]
* Make autopkgtests cross-test-friendly (Closes: #953143).
-- Gianfranco Costamagna <locutusofborg@debian.org> Sat, 20 Nov 2021 22:30:00 +0100
mbedtls (2.16.11-0.1) unstable; urgency=medium
* Non-maintainer upload
* New upstream release
* Enable CMAC support. Closes: #994681
- Updated libmbedcrypto3.symbols
* d/control: Bump Standards-Version to 4.6.0
* d/control: Use debhelper-compat (= 13)
* d/rules: use scripts/config.pl instead of manually editing config.h
* d/rules: add -DENABLE_PROGRAMS=OFF to skip building not installed binaries
* Add debian/upstream/metadata file
-- Andrea Pappacoda <andrea@pappacoda.it> Wed, 17 Nov 2021 17:08:07 +0100
mbedtls (2.16.9-0.1) unstable; urgency=medium
* Non-maintainer upload
* New upstream release
* Fixes CVE-2020-10932 (Closes: #963159)
* Fixes CVE-2020-16150 (Closes: #972806)
* Updated watch and Homepage to new github upstream
* Updated symbols file (two new for 2.6.19)
-- Wookey <wookey@debian.org> Thu, 17 Dec 2020 18:55:19 +0000
mbedtls (2.16.5-1) unstable; urgency=medium
* New upstream release.
-- James Cowgill <jcowgill@debian.org> Sat, 29 Feb 2020 22:26:47 +0000
mbedtls (2.16.4-1) unstable; urgency=medium
* New upstream release.
- Fixes CVE-2019-18222 - Side channel attack on ECDSA.
* d/control: Bump standards version to 4.5.0.
* d/libmbedcrypto3.symbols: Add new mbedtls_mpi_lt_mpi_ct symbol.
-- James Cowgill <jcowgill@debian.org> Tue, 28 Jan 2020 23:38:13 +0000
mbedtls (2.16.3-1) unstable; urgency=medium
* New upstream release.
- Fixes CVE-2019-16910 - Side channel attack on deterministic
ECDSA. (Closes: #941265)
* d/libmbedcrypto3.symbols:
- Add new mbedtls_ecdsa_sign_det_ext symbol.
-- James Cowgill <jcowgill@debian.org> Sat, 28 Sep 2019 21:39:18 +0100
mbedtls (2.16.2-1) unstable; urgency=medium
* New upstream release.
* d/control: Use debhelper compat 12.
* d/libmbedx509-0.symbols: Add new test symbols.
* d/not-installed: Add file listing mbedTLS programs.
-- James Cowgill <jcowgill@debian.org> Mon, 15 Jul 2019 23:18:37 +0100
# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libmbedx509-7`.
Generated by dwww version 1.16 on Fri Aug 14 20:13:55 CEST 2026.