CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/mbedtls3 3.6.7

SSL/TLS and cryptography library

0
unaddressed
0
VuXML only
2
fixed
0
open problem reports

Port info

Maintainer
tijl@FreeBSD.org
Packages
latest: 3.6.7
Upstream
up to date
Last update
to 3.6.7 · e41ca38c76
Quarterly
2026Q4: 3.6.7
WWW
https://www.trustedfirmware.org/projects/mbed-tls/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install mbedtls3
installs 3.6.7 from latest; from quarterly (2026Q4) 3.6.7
Port
# cd /usr/ports/security/mbedtls3 && make install clean
Size
1.2 MiB download · 11 MiB installed
Depends on
nothing
License
APACHE20 or GPLv2+

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.6.73.6.7–
FreeBSD 153.6.73.6.7–
FreeBSD 143.6.73.6.73.6.7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.6.73.6.7–
FreeBSD 143.6.73.6.73.6.7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.6.7.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
CVECVSSPublishedDescription
CVE-2025-664425.12026-04-01VuXML · In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-C…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (10)

Tijl Coosemans (tijl) · 3.6.7
security/mbedtls3: Update to 3.6.7
e41ca38c76
Tijl Coosemans (tijl) · 3.6.6
security/mbedtls3: Update to 3.6.6
4ede6ce375
Vladimir Druzenko (vvd) · 3.6.5
security/mbedtls3: Adjust CONFLICTS in anticipation of security/mbedtls4

PR:		293527
Approved by:	tijl (implicit)
305cd2ed70
Po-Chuan Hsieh (sunpoet) · 3.6.5
Mk/Uses/cmake.mk: Rename CMAKE_TESTING_PARALLEL_LEVEL to CMAKE_TESTING_JOBS

PR:		290583
Approved by:	jhale
43a48347ab
Daniel Engberg (diizzy) · 3.6.5
security/mbedtls3: Update to 3.6.5

Changelog: https://github.com/Mbed-TLS/mbedtls/tree/mbedtls-3.6.5

PR:		290310
Reviewed by:	tijl (maintainer)
f02578bbc3
Tijl Coosemans (tijl) · 3.6.3
security/mbedtls3: Update to 3.6.3
f4b902fa93
Tijl Coosemans (tijl) · 3.6.2_1
security/mbedtls3: Remove more traces of libeverest and libp256m

These 3rdparty libraries aren't used in the default configuration.

PR:		283782
c17097fa3f
Tijl Coosemans (tijl) · 3.6.2
security/mbedtls3: Update to 3.6.2
432fff7aa1
Tijl Coosemans (tijl) · 3.6.1
security/mbedtls3: Update to 3.6.1

PR:		281167
6ff8364d1d
Tijl Coosemans (tijl) · 3.6.0
security/mbedtls3: New port, version 3.6.0

PR:		270024
01623d80e0