<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<p class="isSelectedEnd" style="direction: ltr; text-align: left; text-indent: 0px; text-transform: none;">
<span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Package: mbedtls<br>
Version: 2.28.3-1</span></p>
<p class="isSelectedEnd" style="text-align: left; text-indent: 0px; text-transform: none;">
<span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">The mbedtls package in Debian bookworm appears to be affected by<br>
multiple vulnerabilities:</span></p>
<ol start="1" data-spread="true" style="text-align: left;">
<li style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="text-transform: none;" role="presentation">CVE-2025-47917:<br>
Use-after-free in mbedtls_x509_string_to_names() due to unexpected<br>
freeing of output parameter memory.</span></li><li style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="text-transform: none;" role="presentation">CVE-2025-48965:<br>
NULL pointer dereference in mbedtls_asn1_store_named_data when<br>
val.p is NULL and val.len is non-zero.</span></li><li style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="text-transform: none;" role="presentation">CVE-2025-52496:<br>
Race condition in AESNI detection which may allow AES key leakage<br>
or GCM forgery in multithreaded environments.</span></li></ol>
<p class="isSelectedEnd" style="text-align: left; text-indent: 0px; text-transform: none;">
<span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Reference:<br>
<a href="https://security-tracker.debian.org/tracker/CVE-2025-47917" data-outlook-id="2510401a-d5e4-41ba-951a-cc57a7736136" style="margin-top: 0px; margin-bottom: 0px;">https://security-tracker.debian.org/tracker/CVE-2025-47917</a><br>
<a href="https://security-tracker.debian.org/tracker/CVE-2025-48965" data-outlook-id="69baceed-e706-4038-9763-b3feb5fc7628" style="margin-top: 0px; margin-bottom: 0px;">https://security-tracker.debian.org/tracker/CVE-2025-48965</a><br>
<a href="https://security-tracker.debian.org/tracker/CVE-2025-52496" data-outlook-id="93ded13e-c554-49c9-be69-a9b4800aaaf5" style="margin-top: 0px; margin-bottom: 0px;">https://security-tracker.debian.org/tracker/CVE-2025-52496</a></span></p>
<p class="isSelectedEnd" style="text-align: left; text-indent: 0px; text-transform: none;">
<span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">System details:<br>
Debian bookworm<br>
mbedtls version 2.28.3-1</span></p>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="ms-outlook-mobile-signature">
<p class="MsoNormal" style="margin: 0in;"><span style="font-family: "Segoe UI", sans-serif; font-size: 10pt; color: rgb(112, 48, 160);">Thanks & Regards,</span></p>
<p style="margin: 0in;"><span style="font-family: "Segoe UI", sans-serif; font-size: 10pt; color: rgb(233, 113, 50);"><b>Ayush Prasad</b></span><span style="font-family: "Segoe UI", sans-serif; font-size: 9pt; color: gray;"><br>
</span><span style="font-family: "Segoe UI", sans-serif; font-size: 9pt; color: black; background-color: white;"><b>Software Prod & Plat Eng Team Lead</b></span></p>
<p style="margin: 0in;"><span style="font-family: "Segoe UI", sans-serif; font-size: 9pt; color: rgb(25, 107, 36);"><b>APP Life Sciences – Product Engineering</b></span></p>
<p style="margin: 0in;"><span style="font-family: "Segoe UI", sans-serif; font-size: 9pt; color: rgb(33, 33, 33);"><b>Advanced Technology Centres India (ATCI)</b></span><span style="font-family: "Segoe UI", sans-serif; font-size: 9pt; color: rgb(0, 32, 96);"><b><br>
</b></span><span style="font-family: "Segoe UI", sans-serif; font-size: 9pt; color: rgb(25, 107, 36);"><b>Mobile
</b></span><span style="font-family: "Segoe UI", sans-serif; font-size: 9pt; color: rgb(150, 96, 125);"><a href="tel:+919123774187" data-outlook-id="1f33ff00-bc76-47c0-8907-20d1ecab5fe1" style="color: rgb(150, 96, 125); margin-top: 0px; margin-bottom: 0px;"><b><u>+91
9123774187</u></b></a></span></p>
<p style="margin: 0px 0in;"><span style="font-family: "Graphik Medium"; font-size: 8pt; color: rgb(31, 78, 121);"><img src="cid:8F239054-DA29-4401-912E-D5D40074FE80" alt="Image" id="Picture_x0020_1" data-origin-cid="image001.gif@01DBFAFC.AB162760" data-origin-width="87" data-origin-height="26" width="86" height="25" style="width: 0.9062in; height: 0.2708in; max-width: 100%; margin-top: 0px; margin-bottom: 0px;"></span></p>
<div style="direction: ltr; margin: 0in; font-family: "Graphik Medium", sans-serif; font-size: 8pt; color: rgb(31, 78, 121);">
<br>
</div>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by
you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security, AI-powered support
capabilities, and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data,
please see our privacy statement at https://www.accenture.com/us-en/privacy-policy.
<br>
______________________________________________________________________________________<br>
<br>
www.accenture.com<br>
</font>
</body>
</html>