Skip to content

(backport 87637/88593 to 4.1) modules: mbedtls: update to 3.6.3 and tf-m to 2.1.2 #88433

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Apr 27, 2025
Merged

(backport 87637/88593 to 4.1) modules: mbedtls: update to 3.6.3 and tf-m to 2.1.2 #88433

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
27f19cb
modules: mbedtls: update to 3.6.3
wearyzen Apr 10, 2025
8d964d7
modules: tf-m: update to 2.1.2
wearyzen Apr 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
42 changes: 42 additions & 0 deletions doc/releases/release-notes-4.1.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,48 @@

.. _zephyr_4.1:

.. _zephyr_4.1.1:

Zephyr 4.1.1
############

This is an LTS maintenance release with fixes.

Security Vulnerability Related
******************************

The following CVEs are addressed by this release:

* :cve:`2025-27809` `TLS clients may unwittingly skip server authentication
<https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-1/>`_
* :cve:`2025-27810` `Potential authentication bypass in TLS handshake
<https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-2/>`_

More detailed information can be found in:
https://docs.zephyrproject.org/latest/security/vulnerabilities.html

Issues fixed
************

These GitHub issues were addressed since the previous 4.1.0 tagged release:

Mbed TLS
********

Mbed TLS was updated to version 3.6.3 (from 3.6.2). The release notes can be found at:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3

Mbed TLS 3.6 is an LTS release that will be supported
with security and bug fixes until at least March 2027.

Trusted Firmware-M (TF-M)
*************************

TF-M was updated to version 2.1.2 (from 2.1.1). The release notes can be found at:
https://trustedfirmware-m.readthedocs.io/en/tf-mv2.1.2/releases/2.1.2.html

.. _zephyr_4.1.0:

Zephyr 4.1.0
############

Expand Down
2 changes: 1 addition & 1 deletion submanifests/optional.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ manifest:
groups:
- optional
- name: tf-m-tests
revision: 502ea90105ee18f20c78f710e2ba2ded0fc0756e
revision: c712761dd5391bf3f38033643d28a736cae89a19
path: modules/tee/tf-m/tf-m-tests
remote: upstream
groups:
Expand Down
4 changes: 2 additions & 2 deletions west.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -298,7 +298,7 @@ manifest:
revision: 1ed1ddd881c3784049a92bb9fe37c38c6c74d998
path: modules/lib/gui/lvgl
- name: mbedtls
revision: 4952e1328529ee549d412b498ea71c54f30aa3b1
revision: 5f889934359deccf421554c7045a8381ef75298f
path: modules/crypto/mbedtls
groups:
- crypto
Expand Down Expand Up @@ -353,7 +353,7 @@ manifest:
groups:
- tee
- name: trusted-firmware-m
revision: 918f32d9fce5e0ee59fc33844b5317b7626ce37a
revision: e2288c13ee0abc16163186523897e7910b03dd31
path: modules/tee/tf-m/trusted-firmware-m
groups:
- tee
Expand Down
Loading