571 matches found
MGASA-2026-0375 Updated mbedtls packages fix security vulnerabilities
TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group. CVE-2026-25832 Possible buffer overflow in mbedtlsecdhcalcsecret. CVE-2026-35336 X.509 CA bit forgery via invalid basicConstraints extension. CVE-2026-49300 Use-after-free in mbedtlspkcs7free when reusing a PKCS7 context...
ROOT-OS-DEBIAN-12-CVE-2025-47917 CVE-2025-47917 in mbedtls - Patched by Root
Root has patched CVE-2025-47917 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-28960 CVE-2024-28960 in mbedtls - Patched by Root
Root has patched CVE-2024-28960 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-34872 CVE-2026-34872 in mbedtls - Patched by Root
Root has patched CVE-2026-34872 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-34875 CVE-2026-34875 in mbedtls - Patched by Root
Root has patched CVE-2026-34875 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-52496 CVE-2025-52496 in mbedtls - Patched by Root
Root has patched CVE-2025-52496 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-52497 CVE-2025-52497 in mbedtls - Patched by Root
Root has patched CVE-2025-52497 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-59438 CVE-2025-59438 in mbedtls - Patched by Root
Root has patched CVE-2025-59438 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-27810 CVE-2025-27810 in mbedtls - Patched by Root
Root has patched CVE-2025-27810 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-48965 CVE-2025-48965 in mbedtls - Patched by Root
Root has patched CVE-2025-48965 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-34873 CVE-2026-34873 in mbedtls - Patched by Root
Root has patched CVE-2026-34873 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-23775 CVE-2024-23775 in mbedtls - Patched by Root
Root has patched CVE-2024-23775 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-27809 CVE-2025-27809 in mbedtls - Patched by Root
Root has patched CVE-2025-27809 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-23170 CVE-2024-23170 in mbedtls - Patched by Root
Root has patched CVE-2024-23170 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-25835 CVE-2026-25835 in mbedtls - Patched by Root
Root has patched CVE-2026-25835 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-63650
A flaw was found in OpenVPN when using mbedTLS. A remote authenticated user could be misidentified due to the software ignoring the configured X.509 username identity lookup field. This could lead to incorrect user authentication and potential security bypasses...
SUSE CVE-2026-63650
OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...
UBUNTU-CVE-2026-63650
OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...
Linux Distros Unpatched Vulnerability : CVE-2026-63650
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup...
