-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 21 May 2026 13:49:04 +0300
Source: mbedtls
Architecture: source
Version: 3.6.6-0.1~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian IoT Maintainers <debian-iot-maintainers@alioth-lists.debian.net>
Changed-By: Adrian Bunk <bunk@debian.org>
Closes: 1132577 1133841
Changes:
 mbedtls (3.6.6-0.1~deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * Rebuild for trixie.
 .
 mbedtls (3.6.6-0.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * New upstream release.
     - CVE-2026-25834: Signature Algorithm Injection
     - CVE-2026-25835: PSA random generator cloning
     - CVE-2026-34872: FFDH: improper input validation
     - CVE-2026-34873: Client impersonation resuming a TLS 1.3 session
     - CVE-2026-34874: Null pointer dereference setting a distinguished name
     - CVE-2026-34875: Buffer overflow in FFDH public key export
     - CVE-2026-34876: CCM multipart finish tag-length validation bypass
     (Closes: #1133841, #1132577)
Checksums-Sha1:
 ea4cf9fc3e2c34b5349b65bc35e7ef1829b2a25c 2490 mbedtls_3.6.6-0.1~deb13u1.dsc
 71dd91cc76e77a0dcf0d8020377523ed7e703d8e 5508045 mbedtls_3.6.6.orig.tar.bz2
 e16fc47218071d472de8da50ca9ce99fe720074a 19084 mbedtls_3.6.6-0.1~deb13u1.debian.tar.xz
Checksums-Sha256:
 eb9ed1adbbddcb0d00276fac6fcee0056c64ce01481c2522a16dca75792eb5eb 2490 mbedtls_3.6.6-0.1~deb13u1.dsc
 8fb65fae8dcae5840f793c0a334860a411f884cc537ea290ce1c52bb64ca007a 5508045 mbedtls_3.6.6.orig.tar.bz2
 210466c522eeebc85cf2f76bd5aef935b4ebac465559cc0a84f9e73a8ed6601c 19084 mbedtls_3.6.6-0.1~deb13u1.debian.tar.xz
Files:
 4ac6965e436730429c88b4ef55b8e570 2490 libs optional mbedtls_3.6.6-0.1~deb13u1.dsc
 8147a63a1ce289ebc0fb2190a5cce03f 5508045 libs optional mbedtls_3.6.6.orig.tar.bz2
 3bd56eb944e5cd4bb5141d91cae6c939 19084 libs optional mbedtls_3.6.6-0.1~deb13u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmpJJv8ACgkQiNJCh6LY
mLGGmA//Y+kg8ukA5VdDkVJeVpFUeDJezjeMejfDTthZTEtsPrS9gngLeo6XN6Td
q5OIITjyHa4NmQP4wAVk3FEPwNvnpuR2ERkYGuenRejRKss+xUoBTOzKLEgyB8tm
Vhx5fH6RBfb68mUb87asBVIfL2bzviOoE/RoGw4n4SyzTAS2QSyKqRZ5WiurQDTz
Tu6QqFSksb3GmphJjrrX/6v3URT5hf9bQr679knckJI+p1NDHz+qqbJU3cIy9lSZ
ftk/wsSZfBRC1nDySjNs3pdR5qxnvtc7b1UjYbAQSg6E1l4RwqAhhTh2P1j+ubSm
gq5nEv09LLfcq+kRebxsN2vUPV7iJLBLH+DtY04C1sPVI1UNA2qZTaOOXtZRoUqX
FMV/VXL2PYmQUDWx+7iOTKG/8D2ra86A0zFS/W/HW0TZFQ/4FZ5LFxYz+nw6UGJH
7LxmNWxecbE0TLsp3KbcuPGYBV95oquUTTjEIl5WwCMF8GJgJUKeJuWh18ZLR2lc
vYIjCllZ+O972ffwN+3TUZzwmiYyWm03/AA5QH+jwEnjXHVkNUANAJoHnVk4RLZz
H/Upm3viaCnfFLRLphXFY5I8/KC93/748MPIeS3lb+8LaeNuQUaUfgM9E7z5DkQk
gRcwhPWaFlt3SaWN7NiIpdI8sQ+2tqpC4SFj8GdXptF/GTbF0bo=
=Btq1
-----END PGP SIGNATURE-----