Dear Mbed TLS users,

We have released Mbed TLS versions 3.6.1 and 2.28.9. These releases provide bugfixes, security fixes and minor improvements.

The 3.6.1 release includes fixes for issues caused by enabling TLS 1.3 for TLS connections in the default configuration.

Full details are available in the release notes:

https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.9

https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.1

We recommend all users to consider whether they are impacted, and to upgrade appropriately.

Many thanks,

David Horstmann
Mbed TLS developer