Dear Mbed TLS users,

We have released Mbed TLS versions 3.6.3 and 2.28.10. These releases provide bugfixes, security fixes and minor improvements.

This release of Mbed TLS provides the fix for the TLS compatibility issue of handling fragmented handshake messages. This release includes fixes for security issues.

Full details are available in the release notes:

https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.10

https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3

We recommend all users to consider whether they are impacted, and to upgrade appropriately.

Many thanks,

Minos Galanakis

Mbed TLS developer