Debian/mbedtls: critical 9.8
An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the seri
Action: Upgrade mbedtls to 3.6.6-0.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.6-0.1 | - |
Fixed versions
| 3.6.6-0.1 |
Sources
- osv: DEBIAN-CVE-2026-34877#Debian:14/mbedtls
- https://security-tracker.debian.org/tracker/CVE-2026-34877
published · modified · JSON