-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 02 Jan 2026 23:05:58 +0200
Source: mbedtls
Architecture: source
Version: 3.6.5-0.1~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian IoT Maintainers <debian-iot-maintainers@alioth-lists.debian.net>
Changed-By: Adrian Bunk <bunk@debian.org>
Closes: 1118750 1118752
Changes:
 mbedtls (3.6.5-0.1~deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * Rebuild for trixie.
 .
 mbedtls (3.6.5-0.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * New upstream release.
     - CVE-2025-54764: Side channel in RSA key generation and operations
       (Closes: #1118750)
     - CVE-2025-59438: Padding oracle through timing of cipher error reporting
       (Closes: #1118752)
Checksums-Sha1:
 a6ff3d7c7859254e36fa1ff813f27fa04cfb5763 2490 mbedtls_3.6.5-0.1~deb13u1.dsc
 3d6cd31c225129741be7aea004546f081408b998 5367178 mbedtls_3.6.5.orig.tar.bz2
 17e958fe318147ba77fedef3591a9c7b82059f41 18856 mbedtls_3.6.5-0.1~deb13u1.debian.tar.xz
Checksums-Sha256:
 a141b94159d8eccb9e97631dad083cb531ecd034164f7428fdfc9db6a7859b5f 2490 mbedtls_3.6.5-0.1~deb13u1.dsc
 4a11f1777bb95bf4ad96721cac945a26e04bf19f57d905f241fe77ebeddf46d8 5367178 mbedtls_3.6.5.orig.tar.bz2
 e4c153b9685a6f3a2ad061fe0936309e7d84a6de7c320c45749912d41f3a808d 18856 mbedtls_3.6.5-0.1~deb13u1.debian.tar.xz
Files:
 ec99577af12d7bc98d0eef0a1040d2d0 2490 libs optional mbedtls_3.6.5-0.1~deb13u1.dsc
 bc79602daf85f1cf35a686b53056de58 5367178 libs optional mbedtls_3.6.5.orig.tar.bz2
 182d945f2349d39edb85892f9aa4a2a6 18856 libs optional mbedtls_3.6.5-0.1~deb13u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=Z74d
-----END PGP SIGNATURE-----