Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/mbedtls@2.16.3-1?distro=trixie
purl pkg:deb/debian/mbedtls@2.16.3-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ydp2-phc9-m7b1 Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.) CVE-2019-16910

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:02:21.246798+00:00 Debian Importer Fixing VCID-ydp2-phc9-m7b1 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:57:45.733427+00:00 Debian Importer Fixing VCID-ydp2-phc9-m7b1 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:45:35.381177+00:00 Debian Importer Fixing VCID-ydp2-phc9-m7b1 https://security-tracker.debian.org/tracker/data/json 38.1.0