Mbed TLS 4.1.0

{
  "id": "ebd30e45b3fa566def3b1870431260d9fdde7912f3e1b8cc30809bee068e400c",
  "url": "https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.1.0",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Mbed TLS 4.1.0",
    "summary": "Mbed TLS 4.1.0 includes fixes for security issues, including TLS signature-algorithm validation and TLS 1.3 session-resumption handling. It also fixes X.509 memory-handling issues. The release includes TF-PSA-Crypto 1.1.0 and can only be built with that included version.",
    "evidence": "This release includes fixes for security issues.",
    "products": [
      {
        "name": {
          "value": "Mbed TLS",
          "evidence": "Mbed TLS 4.1.0"
        },
        "prerequisites": [
          {
            "value": "TF-PSA-Crypto 1.1.0",
            "evidence": "Mbed TLS 4.1.0 includes TF-PSA-Crypto 1.1.0 (as a subtree in the tarball, and as a submodule in git) and can only be built with this included version TF-PSA-Crypto."
          }
        ],
        "fixed_versions": [
          {
            "value": "4.1.0",
            "evidence": "Mbed TLS 4.1.0"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-25833",
        "evidence": "CVE-2026-25833"
      },
      {
        "value": "CVE-2026-25834",
        "evidence": "CVE-2026-25834"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-mbed-tls-mbedtls",
  "document_id": 21725,
  "published_at": "2026-04-01T11:05:54+00:00"
}