{"schemaVersion":3,"id":"OPENSUSE-SU-2026:21144-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for mbedtls\n\nThis update for mbedtls fixes the following issues:\n\nChanges in mbedtls:\n\n- Update to 3.6.6 (LTS maintenance update from 3.6.1); security fixes\n  accumulated across the 3.6.2-3.6.6 releases:\n  * CVE-2024-49195 (boo#1231708): buffer underrun in pkwrite when\n    writing an opaque key pair\n  * CVE-2025-27809 (boo#1240051): certificate verification accepted\n    arbitrary hostnames\n  * CVE-2025-27810 (boo#1240052): possible authentication bypass on\n    failed memory allocation / hardware errors\n  * CVE-2025-47917 (boo#1246783): misleading memory management in\n    mbedtls_x509_string_to_names()\n  * CVE-2025-48965 (boo#1246784): NULL pointer dereference after\n    mbedtls_asn1_store_named_data()\n  * CVE-2025-49087 (boo#1246973): timing side channel in PKCS#7\n    padding removal\n  * CVE-2025-49600 (boo#1245808): unchecked return values in LMS\n    verification allow signature bypass via fault injection\n  * CVE-2025-49601 (boo#1245809): out-of-bounds read in\n    mbedtls_lms_import_public_key()\n  * CVE-2025-52496 (boo#1245810): race in AES-NI support detection can\n    lead to AES key extraction or GCM forgery\n  * CVE-2025-52497 (boo#1245811): one-byte heap underflow when parsing\n    PEM-encrypted material\n  * CVE-2025-54764 (boo#1252341): timing attacks in RSA operations\n  * CVE-2025-59438 (boo#1252454): padding-oracle attack via timing of\n    cipher error reporting\n  * CVE-2026-25833: PSA RNG state duplicated across fork()\n  * CVE-2026-25834: TLS 1.3 HelloRetryRequest man-in-the-middle\n    session-resumption downgrade\n  * CVE-2026-25835: RNG state duplicated when application/VM state is\n    cloned","dates":{"published":"2026-06-22T13:34:13.000Z","modified":"2026-06-30T18:24:45.186Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"mbedtls&distro=openSUSE Leap 16.0","name":"mbedtls","label":"mbedtls&distro=openSUSE Leap 16.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/mbedtls&distro=openSUSE Leap 16.0","purlType":"rpm","versions":[{"text":"< 3.6.6-bp160.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.6-bp160.1.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://bugzilla.suse.com/1231708","label":"bugzilla.suse.com/1231708","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1240051","label":"bugzilla.suse.com/1240051","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1240052","label":"bugzilla.suse.com/1240052","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1245808","label":"bugzilla.suse.com/1245808","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1245809","label":"bugzilla.suse.com/1245809","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1245810","label":"bugzilla.suse.com/1245810","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1245811","label":"bugzilla.suse.com/1245811","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246783","label":"bugzilla.suse.com/1246783","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246784","label":"bugzilla.suse.com/1246784","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246973","label":"bugzilla.suse.com/1246973","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252341","label":"bugzilla.suse.com/1252341","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252454","label":"bugzilla.suse.com/1252454","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49195","label":"www.suse.com/security/cve/CVE-2024-49195","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27809","label":"www.suse.com/security/cve/CVE-2025-27809","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27810","label":"www.suse.com/security/cve/CVE-2025-27810","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47917","label":"www.suse.com/security/cve/CVE-2025-47917","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48965","label":"www.suse.com/security/cve/CVE-2025-48965","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49087","label":"www.suse.com/security/cve/CVE-2025-49087","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49600","label":"www.suse.com/security/cve/CVE-2025-49600","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49601","label":"www.suse.com/security/cve/CVE-2025-49601","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52496","label":"www.suse.com/security/cve/CVE-2025-52496","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52497","label":"www.suse.com/security/cve/CVE-2025-52497","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54764","label":"www.suse.com/security/cve/CVE-2025-54764","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59438","label":"www.suse.com/security/cve/CVE-2025-59438","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25833","label":"www.suse.com/security/cve/CVE-2026-25833","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25834","label":"www.suse.com/security/cve/CVE-2026-25834","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25835","label":"www.suse.com/security/cve/CVE-2026-25835","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2024-49195","CVE-2025-27809","CVE-2025-27810","CVE-2025-47917","CVE-2025-48965","CVE-2025-49087","CVE-2025-49600","CVE-2025-49601","CVE-2025-52496","CVE-2025-52497","CVE-2025-54764","CVE-2025-59438","CVE-2026-25833","CVE-2026-25834","CVE-2026-25835"],"downstream":[],"duplicates":[],"related":["CVE-2024-49195","CVE-2025-27809","CVE-2025-27810","CVE-2025-47917","CVE-2025-48965","CVE-2025-49087","CVE-2025-49600","CVE-2025-49601","CVE-2025-52496","CVE-2025-52497","CVE-2025-54764","CVE-2025-59438","CVE-2026-25833","CVE-2026-25834","CVE-2026-25835"]},"timeline":[{"kind":"published","date":"2026-06-22T13:34:13.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-30T18:24:45.186Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T10:34:03.159Z","stale":false,"partial":false}}