Apologies for the confusion: the new archive from yesterday was fine,
but was accidentally compressed with xz despite its filename having the
extension .bz2.
We have now reverted the original archive under the original name
mbedtls-3.6.4.tar.bz2, and provided the new archives fixing
https://github.com/Mbed-TLS/mbedtls/issues/10332 with a new name
mbedtls-3.6.4-easy-make-lib.tar.bz2.
For avoidance of doubt, we're keeping the xz formatted archive
available, with a name matching its format.
All three archive have the same file contents:
40d83e4040c3e548a61f6ac19b697b0380149abafd6923196a70b6067b543261 mbedtls-3.6.4-easy-make-lib.tar.bz2
6a7ed66b4aca38836f0eff8d8fba72992bf0c7326337608ef01de469fd8368bd mbedtls-3.6.4-easy-make-lib.tar.xz
ec35b18a6c593cf98c3e30db8b98ff93e8940a8c4e690e66b41dfc011d678110 mbedtls-3.6.4.tar.bz2
Use one of the easy-make-lib files if you are affected by
https://github.com/Mbed-TLS/mbedtls/issues/10332. Use any of the files,
or the Git tag, otherwise.
Best regards,
--
Gilles Peskine
On behalf of the Mbed TLS development team
On 31/07/2025 11:46, Gilles Peskine via mbed-tls wrote:
> Hello,
>
> We have updated the mbedtls-3.6.4.tar.bz2 archive in the 3.6.4
> release. This is not a change to the release content: the new archive
> has exactly the same file contents. The new tarball has updated file
> timestamps which fixes a build failure in environments without Python
> and some Python packages
> (
https://github.com/Mbed-TLS/mbedtls/issues/10332).
>
> If you are managing a distribution system that records archive
> checksums, please update from
> ec35b18a6c593cf98c3e30db8b98ff93e8940a8c4e690e66b41dfc011d678110 mbedtls-3.6.4.tar.bz2
> to
> 6a7ed66b4aca38836f0eff8d8fba72992bf0c7326337608ef01de469fd8368bd mbedtls-3.6.4.tar.bz2
>
> The git tag is unaffected. (Building from git does require some Python
> packages as described in README.md.)
>
> Best regards,
>
> --
> Gilles Peskine
> On behalf of the Mbed TLS development team
>
> On 30/06/2025 23:29, Minos Galanakis via mbed-tls wrote:
>> Hi Mbed TLS users,
>>
>> We have released Mbed TLS versions 3.6.4.
>>
>> These releases of Mbed TLS address several security issues, provide
>> bug fixes, and bring other minor changes. Full details are available
>> in the release notes
>> (
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4).
>>
>> We recommend all users to consider whether they are impacted, and to
>> upgrade appropriately.
>>
>>
>
>
