PT-2025-48525 · Julia · Mbedtls Jll

Publicado 2025-11-21 · Atualizado 2025-11-21

OSV

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls ssl set hostname.

Identificadores relacionados

JLSEC-2025-227

Produtos afetados

Mbedtls Jll

Referências · 5

• https://github.com/Mbed-TLS/mbedtls/releases · Nota
• https://github.com/Mbed-TLS/mbedtls/issues/466 · Nota
• https://osv.dev/vulnerability/JLSEC-2025-227 · Aviso do Fabricante
• https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-1 · Nota
• https://mastodon.social/@bagder/114219540623402700 · Nota