Linux · openSUSE Leap · Security advisory · June 22, 2026

OPENSUSE-SU-2026:21144-1: mbedtls security update

OPENSUSE-SU-2026:21144-1, released June 22, 2026, fixes 15 CVEs in mbedtls (version 3.6.6-bp160.1.1). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
15
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0244
84th percentile

Priority of the 15 CVEs

Patch now 0 Urgent 2 High 4 Routine 9

Fixed package versions

ProductReleaseFixed in
mbedtlsopensuse-leap 16.03.6.6-bp160.1.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2025-47917 mbedtls: mbedtls - security update9.8 0.0244 None reported
Urgent CVE-2024-49195 mbedtls: Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair9.8 0.0063 None reported
High CVE-2025-48965 libmbedx509-1t64: Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger conflicting da...7.5 0.0057 None reported
High CVE-2026-25833 mbedtls: Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function7.5 0.0032 None reported
High CVE-2025-52496 Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.7.8 0.0021 None reported
High CVE-2026-25835 mbedtls: Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).7.7 0.0018 None reported
Routine CVE-2025-49087 mbedtls: In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker...3.7 0.0047 None reported
Routine CVE-2025-52497 mbedtls: Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two mbed...4.8 0.0033 None reported
Routine CVE-2025-49601 mbedtls: In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes...6.5 0.0032 None reported
Routine CVE-2025-27810 mbedtls: Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses unin...4.8 0.0030 None reported
Routine CVE-2025-59438 mbedtls: Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.5.3 0.0026 None reported
Routine CVE-2025-54764 mbedtls: Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mo...6.2 0.0022 None reported
Routine CVE-2025-27809 mbedtls: Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for...5.4 0.0020 None reported
Routine CVE-2025-49600 mbedtls: In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and interna...4.9 0.0016 None reported
Routine CVE-2026-25834 mbedtls: Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.6.5 0.0014 None reported
Showing 1 to 15 of 15 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.