Alpine/mbedtls: critical 9.8

Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.

Action: Upgrade mbedtls to 2.16.12-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2021-44732#Alpine:v3.13/mbedtls
• https://security.alpinelinux.org/vuln/CVE-2021-44732

published 2021-12-20T08:15:06.620Z · modified 2026-10-23T17:17:56.227854484Z · JSON