mbedtls (3.6.6-0.1ubuntu1) stonking; urgency=low

  * Merge from Debian unstable. Remaining changes:
  * Also export -Wno-stringop-overflow on ppc64el
    - see https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/668

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Sun, 24 May 2026 12:09:52 +0200

mbedtls (3.6.6-0.1) unstable; urgency=medium

  * Non-maintainer upload.
  * New upstream release.
    - CVE-2026-25834: Signature Algorithm Injection
    - CVE-2026-25835: PSA random generator cloning
    - CVE-2026-34872: FFDH: improper input validation
    - CVE-2026-34873: Client impersonation resuming a TLS 1.3 session
    - CVE-2026-34874: Null pointer dereference setting a distinguished name
    - CVE-2026-34875: Buffer overflow in FFDH public key export
    - CVE-2026-34876: CCM multipart finish tag-length validation bypass
    (Closes: #1133841, #1132577)

 -- Adrian Bunk <bunk@debian.org>  Thu, 30 Apr 2026 15:38:39 +0300

mbedtls (3.6.5-0.1ubuntu2) resolute; urgency=medium

  * Upstream fix 668 for ppc64el build failure
  * Also export -Wno-stringop-overflow on ppc64el
    - see https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/668

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Tue, 20 Jan 2026 16:49:52 +0100

mbedtls (3.6.5-0.1ubuntu1) resolute; urgency=medium

  * Merge with Debian; remaining changes:
    - Lower optimization level to O2 on ppc64el to fix a test failure
      https://github.com/Mbed-TLS/mbedtls/issues/9743

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Sat, 13 Dec 2025 12:17:33 +0100

mbedtls (3.6.5-0.1) unstable; urgency=medium

  * Non-maintainer upload.
  * New upstream release.
    - CVE-2025-54764: Side channel in RSA key generation and operations
      (Closes: #1118750)
    - CVE-2025-59438: Padding oracle through timing of cipher error reporting
      (Closes: #1118752)

 -- Adrian Bunk <bunk@debian.org>  Fri, 14 Nov 2025 22:00:32 +0200

mbedtls (3.6.4-2) unstable; urgency=medium

  * d/libmbedtls21.symbols: add new 3.6.4 symbols

 -- Andrea Pappacoda <tachi@debian.org>  Mon, 14 Jul 2025 15:19:49 +0200

mbedtls (3.6.4-1) unstable; urgency=medium

  * New upstream version 3.6.4
    - Closes: #1108785 (CVE-2025-52496)
    - Closes: #1108786 (CVE-2025-52497)
    - Closes: #1108787 (CVE-2025-49600)
    - Closes: #1108788 (CVE-2025-49601)

 -- Andrea Pappacoda <tachi@debian.org>  Sun, 13 Jul 2025 13:26:04 +0200

mbedtls (3.6.3-1) unstable; urgency=medium

  * New upstream version 3.6.3
    - Fixes CVE-2025-27809
    - Fixes CVE-2025-27810
    - Closes: #1101499
  * d/control: use my @debian.org email address
  * d/control: apply X-Style: black
  * d/control: declare dpkg-build-api = 1
  * d/.symbols: mark private symbol as optional, add new ones

 -- Andrea Pappacoda <tachi@debian.org>  Sat, 05 Apr 2025 15:45:07 +0200

mbedtls (3.6.2-3ubuntu1) plucky; urgency=medium

  * Merge with Debian; remaining changes:
    - Lower optimization level to O2 on ppc64el to fix a test failure

 -- Matthias Klose <doko@ubuntu.com>  Tue, 19 Nov 2024 19:55:00 +0100

mbedtls (3.6.4-2) unstable; urgency=medium

  * d/libmbedtls21.symbols: add new 3.6.4 symbols

 -- Andrea Pappacoda <tachi@debian.org>  Mon, 14 Jul 2025 15:19:49 +0200

mbedtls (3.6.4-1) unstable; urgency=medium

  * New upstream version 3.6.4
    - Closes: #1108785 (CVE-2025-52496)
    - Closes: #1108786 (CVE-2025-52497)
    - Closes: #1108787 (CVE-2025-49600)
    - Closes: #1108788 (CVE-2025-49601)

 -- Andrea Pappacoda <tachi@debian.org>  Sun, 13 Jul 2025 13:26:04 +0200

mbedtls (3.6.3-1) unstable; urgency=medium

  * New upstream version 3.6.3
    - Fixes CVE-2025-27809
    - Fixes CVE-2025-27810
    - Closes: #1101499
  * d/control: use my @debian.org email address
  * d/control: apply X-Style: black
  * d/control: declare dpkg-build-api = 1
  * d/.symbols: mark private symbol as optional, add new ones

 -- Andrea Pappacoda <tachi@debian.org>  Sat, 05 Apr 2025 15:45:07 +0200

mbedtls (3.6.2-3) unstable; urgency=medium

  [ Reinhard Tartler ]
  * Update 100-fix-gcc14-build to patch the correct file

 -- Andrea Pappacoda <andrea@pappacoda.it>  Sun, 17 Nov 2024 18:23:19 +0100

mbedtls (3.6.2-2ubuntu1) plucky; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Lower optimization level to O2 on ppc64el to fix a test failure
    - Fix gcc-14 patch

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Sat, 09 Nov 2024 20:23:53 +0100

mbedtls (3.6.2-2) unstable; urgency=medium

  * d/patches: fix builds with GCC 14.
    Thanks to Adrian, Christian, and Emilio for the report! (Closes: #1085354)

 -- Andrea Pappacoda <andrea@pappacoda.it>  Wed, 06 Nov 2024 12:54:54 +0100

mbedtls (3.6.2-1ubuntu4) plucky; urgency=medium

  * revert stringop-overflow ignoring, using O2 is enough to fix the tests

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 30 Oct 2024 22:05:57 +0100

mbedtls (3.6.2-1ubuntu3) plucky; urgency=medium

  * Lower optimization level to O2 on ppc64el to fix a test failure

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 30 Oct 2024 21:00:19 +0100

mbedtls (3.6.2-1ubuntu2) plucky; urgency=medium

  * Also ignore stringop-overflow due to ppc64el FTBFS
    - https://github.com/Mbed-TLS/mbedtls/issues/9743

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 30 Oct 2024 20:07:20 +0100

mbedtls (3.6.2-1ubuntu1) plucky; urgency=medium

  * debian/patches/100-fix-gcc14-build.patch
    upstream build fix for arm64 FTBFS on gcc-14 (Closes: #1085354)

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 30 Oct 2024 20:01:33 +0100

mbedtls (3.6.2-1) unstable; urgency=low

  * New upstream version 3.6.2
  * d/.symbols: add new symbols, mark private as optional
  * d/watch: fixup checking of new 3.6 releases

 -- Andrea Pappacoda <andrea@pappacoda.it>  Mon, 21 Oct 2024 16:25:05 +0200

mbedtls (3.6.0-3) unstable; urgency=medium

  * Upload to unstable

 -- Andrea Pappacoda <andrea@pappacoda.it>  Thu, 17 Oct 2024 23:06:32 +0200

mbedtls (3.6.0-2) experimental; urgency=medium

  * d/.symbols: mark aesni symbols as x86-only

 -- Andrea Pappacoda <andrea@pappacoda.it>  Wed, 10 Apr 2024 07:27:06 +0200

mbedtls (3.6.0-1) experimental; urgency=medium

  * New upstream version 3.6.0
    - TLS 1.3 enabled by default. Closes: #971393
    - MBEDTLS_NIST_KW_C enabled by default. Closes: #1053533
    - Fixes CVE-2024-28960 (fixed in 2.28.8 too)
  * d/control: new SONAME, new packages
  * d/copyright: document Project Everest copyright
  * d/libmbedtls-dev.install: install new CMake Config files (Closes: #1036231)
  * d/patches: skip compiling 3rdparty code
  * d/tests: test new CMake Config files
  * d/tests/selftest: use the new pkg-config files
  * d/watch: switch to 3.6.x LTS branch
  * d/watch: use official release tarball

 -- Andrea Pappacoda <andrea@pappacoda.it>  Mon, 01 Apr 2024 22:55:20 +0200

mbedtls (2.28.8-1) unstable; urgency=medium

  * New upstream version 2.28.8
  * d/libmbedtls-dev.install: install new pkg-config files (Closes: #900015)
  * d/.symbols: add new PSA symbols

 -- Andrea Pappacoda <andrea@pappacoda.it>  Sun, 31 Mar 2024 20:02:32 +0200

mbedtls (2.28.7-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1062859

 -- Graham Inggs <ginggs@debian.org>  Thu, 29 Feb 2024 12:19:38 +0000

mbedtls (2.28.7-1) unstable; urgency=medium

  * New upstream version 2.28.7
    - Fixes CVE-2024-23170
    - Fixes CVE-2024-23775
  * d/libmbedcrypto7.symbols: add new MPI symbols

 -- Andrea Pappacoda <andrea@pappacoda.it>  Sat, 27 Jan 2024 13:12:37 +0100

mbedtls (2.28.6-1) unstable; urgency=medium

  * New upstream version 2.28.6
  * d/copyright: now available under Apache-2.0 or GPL-2+
  * d/copyright: update debian/ copyright information

 -- Andrea Pappacoda <andrea@pappacoda.it>  Mon, 20 Nov 2023 09:34:09 +0100

mbedtls (2.28.5-1) unstable; urgency=medium

  * Team upload.
  * debian/control: Update URL to use team's git
  * New upstream version 2.28.5
  * debian/libmbedcrypto7.symbols: Fix symbols for lintian

 -- Philippe Coval <rzr@users.sf.net>  Wed, 11 Oct 2023 19:57:04 +0200

mbedtls (2.28.4-1) unstable; urgency=medium

  * New upstream version 2.28.4
  * d/control: switch ownership to the Debian IoT Team

 -- Andrea Pappacoda <andrea@pappacoda.it>  Fri, 18 Aug 2023 11:41:40 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libmbedcrypto16`.
