[From nobody Sat Sep 5 18:35:08 2026 Received: (at 1133841-close) by bugs.debian.org; 5 Sep 2026 17:32:08 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.6 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PDS_BTC_ID,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 89; hammy, 150; neutral, 200; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:54184) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x2uFM-000Yye-1A for 1133841-close@bugs.debian.org; Sat, 05 Sep 2026 17:32:08 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x2uFN-0009vl-1u for 1133841-close@bugs.debian.org; Sat, 05 Sep 2026 17:32:08 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=beYfFeTFH2rKG2BpQH9uFUm8VyH8mPL62OAilCeTEvo=; b=Dzlwj/4SUb2VaPXQmvBHjCaXNZ Yq9WuhgR2zKekv0D1zocXkjdIqR0t4GC0s04gz1fChKtg9ivPH0q5k8T6kWrFjczYlN8p3wOstMaj imfDj/hTLdHnOjG5fjD3/KMHxAIrv4rC/bdwr1ISCgwk/wTyFLUrmN5Xn78tWbt4YwVjkbmQIs1E0 O7kYxvpI3XywYV579NUjFm9FK0BAcNMgK7lIIYqQ9TaZF9rGZqEfcoHDAMS6T/yWeedEHqh30Xrg8 cSWpDAIA2QwcgTLhD0IsEfHqApKPJXVuqn0//sM+n6XLNP6RiwIotvqJNHP4OI0lrdlyZhv4PHbCJ +xtOhJJw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x2uFL-00000009noT-24K0; Sat, 05 Sep 2026 17:32:07 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Adrian Bunk <bunk@debian.org> To: 1133841-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: mbedtls Debian: DAK Debian-Changes: mbedtls_3.6.6-0.1~deb13u1_source.changes Debian-Source: mbedtls Debian-Version: 3.6.6-0.1~deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1133841: fixed in mbedtls 3.6.6-0.1~deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1023665687400382708==" Message-Id: <E1x2uFL-00000009noT-24K0@fasolo.debian.org> Date: Sat, 05 Sep 2026 17:32:07 +0000 --===============1023665687400382708== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: mbedtls Source-Version: 3.6.6-0.1~deb13u1 Done: Adrian Bunk <bunk@debian.org> We believe that the bug you reported is fixed in the latest version of mbedtls, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1133841@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Adrian Bunk <bunk@debian.org> (supplier of updated mbedtls package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 21 May 2026 13:49:04 +0300 Source: mbedtls Architecture: source Version: 3.6.6-0.1~deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian IoT Maintainers <debian-iot-maintainers@alioth-lists.debia= n.net> Changed-By: Adrian Bunk <bunk@debian.org> Closes: 1132577 1133841 Changes: mbedtls (3.6.6-0.1~deb13u1) trixie; urgency=3Dmedium . * Non-maintainer upload. * Rebuild for trixie. . mbedtls (3.6.6-0.1) unstable; urgency=3Dmedium . * Non-maintainer upload. * New upstream release. - CVE-2026-25834: Signature Algorithm Injection - CVE-2026-25835: PSA random generator cloning - CVE-2026-34872: FFDH: improper input validation - CVE-2026-34873: Client impersonation resuming a TLS 1.3 session - CVE-2026-34874: Null pointer dereference setting a distinguished name - CVE-2026-34875: Buffer overflow in FFDH public key export - CVE-2026-34876: CCM multipart finish tag-length validation bypass (Closes: #1133841, #1132577) Checksums-Sha1: ea4cf9fc3e2c34b5349b65bc35e7ef1829b2a25c 2490 mbedtls_3.6.6-0.1~deb13u1.dsc 71dd91cc76e77a0dcf0d8020377523ed7e703d8e 5508045 mbedtls_3.6.6.orig.tar.bz2 e16fc47218071d472de8da50ca9ce99fe720074a 19084 mbedtls_3.6.6-0.1~deb13u1.deb= ian.tar.xz Checksums-Sha256: eb9ed1adbbddcb0d00276fac6fcee0056c64ce01481c2522a16dca75792eb5eb 2490 mbedtl= s_3.6.6-0.1~deb13u1.dsc 8fb65fae8dcae5840f793c0a334860a411f884cc537ea290ce1c52bb64ca007a 5508045 mbe= dtls_3.6.6.orig.tar.bz2 210466c522eeebc85cf2f76bd5aef935b4ebac465559cc0a84f9e73a8ed6601c 19084 mbedt= ls_3.6.6-0.1~deb13u1.debian.tar.xz Files: 4ac6965e436730429c88b4ef55b8e570 2490 libs optional mbedtls_3.6.6-0.1~deb13u= 1.dsc 8147a63a1ce289ebc0fb2190a5cce03f 5508045 libs optional mbedtls_3.6.6.orig.ta= r.bz2 3bd56eb944e5cd4bb5141d91cae6c939 19084 libs optional mbedtls_3.6.6-0.1~deb13= u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmpJJv8ACgkQiNJCh6LY mLGGmA//Y+kg8ukA5VdDkVJeVpFUeDJezjeMejfDTthZTEtsPrS9gngLeo6XN6Td q5OIITjyHa4NmQP4wAVk3FEPwNvnpuR2ERkYGuenRejRKss+xUoBTOzKLEgyB8tm Vhx5fH6RBfb68mUb87asBVIfL2bzviOoE/RoGw4n4SyzTAS2QSyKqRZ5WiurQDTz Tu6QqFSksb3GmphJjrrX/6v3URT5hf9bQr679knckJI+p1NDHz+qqbJU3cIy9lSZ ftk/wsSZfBRC1nDySjNs3pdR5qxnvtc7b1UjYbAQSg6E1l4RwqAhhTh2P1j+ubSm gq5nEv09LLfcq+kRebxsN2vUPV7iJLBLH+DtY04C1sPVI1UNA2qZTaOOXtZRoUqX FMV/VXL2PYmQUDWx+7iOTKG/8D2ra86A0zFS/W/HW0TZFQ/4FZ5LFxYz+nw6UGJH 7LxmNWxecbE0TLsp3KbcuPGYBV95oquUTTjEIl5WwCMF8GJgJUKeJuWh18ZLR2lc vYIjCllZ+O972ffwN+3TUZzwmiYyWm03/AA5QH+jwEnjXHVkNUANAJoHnVk4RLZz H/Upm3viaCnfFLRLphXFY5I8/KC93/748MPIeS3lb+8LaeNuQUaUfgM9E7z5DkQk gRcwhPWaFlt3SaWN7NiIpdI8sQ+2tqpC4SFj8GdXptF/GTbF0bo=3D =3DBtq1 -----END PGP SIGNATURE----- --===============1023665687400382708== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCapxSFwAKCRCb9qggYcy5 IRJDAQCp6V+RAaefAjkEEvq77cYK1aYrArAkrRAusRpWmYvIHQEA8YRlmGDwE9Ax 5JMsftJOdF/OTwQ/d4KhfOXrAXKsIQQ= =Kqgd -----END PGP SIGNATURE----- --===============1023665687400382708==-- ]