pool/mbedtls
SHA256
20
0
Fork 2
Code Issues Pull Requests Activity

Update to 3.6.6 (LTS security maintenance update) #1

Manually merged
autogits_workflow_pr_bot merged 1 commits from pluskalm/mbedtls:leap-16.0-mbedtls-3.6.6 into leap-16.0 2026-06-22 14:48:18 +02:00
Conversation 9 Commits 1 Files Changed 7
+44 -10
pluskalm commented 2026-06-21 12:08:26 +02:00
Contributor
Copy Link
Copy Source

Update Leap 16.0 mbedtls from 3.6.1 to 3.6.6 (staying on the 3.6 LTS branch). This pulls in the accumulated security fixes from 3.6.2-3.6.6:

CVE-2024-49195 (boo#1231708), CVE-2025-27809 (boo#1240051), CVE-2025-27810 (boo#1240052), CVE-2025-47917 (boo#1246783), CVE-2025-48965 (boo#1246784), CVE-2025-49087 (boo#1246973), CVE-2025-49600 (boo#1245808), CVE-2025-49601 (boo#1245809), CVE-2025-52496 (boo#1245810), CVE-2025-52497 (boo#1245811), CVE-2025-54764 (boo#1252341), CVE-2025-59438 (boo#1252454), CVE-2026-25833, CVE-2026-25834, CVE-2026-25835.

Built and test-suite verified on aarch64.

Update Leap 16.0 mbedtls from 3.6.1 to 3.6.6 (staying on the 3.6 LTS branch). This pulls in the accumulated security fixes from 3.6.2-3.6.6: CVE-2024-49195 (boo#1231708), CVE-2025-27809 (boo#1240051), CVE-2025-27810 (boo#1240052), CVE-2025-47917 (boo#1246783), CVE-2025-48965 (boo#1246784), CVE-2025-49087 (boo#1246973), CVE-2025-49600 (boo#1245808), CVE-2025-49601 (boo#1245809), CVE-2025-52496 (boo#1245810), CVE-2025-52497 (boo#1245811), CVE-2025-54764 (boo#1252341), CVE-2025-59438 (boo#1252454), CVE-2026-25833, CVE-2026-25834, CVE-2026-25835. Built and test-suite verified on aarch64.
pluskalm added 1 commit 2026-06-21 12:08:27 +02:00
Update to 3.6.6 (LTS security maintenance update) 766ed17492 
Fixes CVE-2024-49195, CVE-2025-27809, CVE-2025-27810, CVE-2025-47917,
CVE-2025-48965, CVE-2025-49087, CVE-2025-49600, CVE-2025-49601,
CVE-2025-52496, CVE-2025-52497, CVE-2025-54764, CVE-2025-59438,
CVE-2026-25833, CVE-2026-25834, CVE-2026-25835.
autogits_workflow_pr_bot requested review from legaldb 2026-06-21 12:08:55 +02:00
autogits_workflow_pr_bot requested review from opensuse-review 2026-06-21 12:08:55 +02:00
opensuse-review commented 2026-06-21 12:10:55 +02:00
Member
Copy Link
Copy Source

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @opensuse-review: approve.
To request changes on behalf of the group, create the following comment: @opensuse-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@opensuse-review: approve`. To request changes on behalf of the group, create the following comment: `@opensuse-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
legaldb commented 2026-06-21 12:27:27 +02:00
Member
Copy Link
Copy Source

Legal reviewed as acceptable:

Accepted because of low risk (4)
Legal reviewed as [acceptable](https://legaldb.suse.de/reviews/details/532312): ``` Accepted because of low risk (4) ```
report.md
575 B
legaldb approved these changes 2026-06-21 12:27:27 +02:00
autogits_obs_staging_bot commented 2026-06-22 10:14:06 +02:00
Member
Copy Link
Copy Source

![Build results](https://br.opensuse.org/status/openSUSE:Backports:SLE-16.0:PullRequest:2393/mbedtls)
autogits_obs_staging_bot commented 2026-06-22 11:00:51 +02:00
Member
Copy Link
Copy Source

Build successful, for more information go in https://build.opensuse.org/project/show/openSUSE:Backports:SLE-16.0:PullRequest:2393.

Build successful, for more information go in https://build.opensuse.org/project/show/openSUSE:Backports:SLE-16.0:PullRequest:2393.
mstrigl commented 2026-06-22 14:39:37 +02:00
First-time contributor
Copy Link
Copy Source

@opensuse-review : approve

LGTM

@opensuse-review : approve LGTM
mstrigl commented 2026-06-22 14:39:37 +02:00
First-time contributor
Copy Link
Copy Source

merge ok

merge ok
opensuse-review approved these changes 2026-06-22 14:39:38 +02:00
opensuse-review left a comment
Member
Copy Link
Copy Source

mstrigl approved a review on behalf of opensuse-review

mstrigl approved a review on behalf of opensuse-review
mstrigl approved these changes 2026-06-22 14:39:38 +02:00
mstrigl left a comment
First-time contributor
Copy Link
Copy Source

review accept

review accept
autogits_workflow_pr_bot manually merged commit 766ed17492 into leap-16.0 2026-06-22 14:48:18 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
legaldb
opensuse-review
mstrigl
Labels
Clear labels
legaldb
Critical Priority
Critical legaldb priority
Archived
legaldb
High Priority
2
High legaldb priority
legaldb
Normal Priority
1
Normal legaldb priority
new/New Repository
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
adamm_super (Adam Majer) adrianSuSE (Adrian Schröter) atartamo (Antonello Tartamo) autobuild-owner (autobuild owner) autobuild-review autogits_obs_staging_bot (Autogits OBS Staging Bot) autogits_workflow_pr_bot (workflow bot) bigironman (Wolfgang Engel) dirkmueller (Dirk Mueller) eroca (Elisei Roca) factory_bot legaldb lkocman-factory (Lubos Kocman) maxlin_factory (Yuchen Lin) msmeissn (Marcus Meissner) opensuse-review (opensuse-review) packagehub-review rfrohl (Robert Frohl) smithfarm (Nathan Cutler)
No Assignees
5 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: pool/mbedtls#1
Delete Branch "pluskalm/mbedtls:leap-16.0-mbedtls-3.6.6"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?