Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Proposed as a Blocker for 43-final by Fedora user pbrobinson using the blocker tracking app because: mbedtls 3.6.5 is a security release. It has a number of CVEs, there's one rated HIGH [1] (Red Hat doesn't rate ones not shipped in RHEL). It affects the following packages in Worksttion: ffmpeg-free gnome-classic-session gstreamer1-plugin-libav localsearch nautilus papers-nautilus [1] https://cve.akaoma.com/cve-2025-54764
This is the EPEL bug. https://bugzilla.redhat.com/show_bug.cgi?id=2405239 would make a better blocker candidate.