Alpine/mbedtls: low 3.7

In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.

Action: Upgrade mbedtls to 4.1.1-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2026-25832#Alpine:v3.24/mbedtls
• https://security.alpinelinux.org/vuln/CVE-2026-25832

published 2026-09-14T07:17:16.490Z · modified 2026-10-01T02:17:49.216692134Z · JSON