Hello,

We have updated the mbedtls-3.6.4.tar.bz2 archive in the 3.6.4 release. This is not a change to the release content: the new archive has exactly the same file contents. The new tarball has updated file timestamps which fixes a build failure in environments without Python and some Python packages (https://github.com/Mbed-TLS/mbedtls/issues/10332).

If you are managing a distribution system that records archive checksums, please update from

ec35b18a6c593cf98c3e30db8b98ff93e8940a8c4e690e66b41dfc011d678110  mbedtls-3.6.4.tar.bz2

6a7ed66b4aca38836f0eff8d8fba72992bf0c7326337608ef01de469fd8368bd  mbedtls-3.6.4.tar.bz2

The git tag is unaffected. (Building from git does require some Python packages as described in README.md.)

Best regards,

--
Gilles Peskine
On behalf of the Mbed TLS development team

On 30/06/2025 23:29, Minos Galanakis via mbed-tls wrote:

Hi Mbed TLS users,

We have released Mbed TLS versions 3.6.4.

These releases of Mbed TLS address several security issues, provide bug fixes, and bring other minor changes. Full details are available in the release notes (https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4).

We recommend all users to consider whether they are impacted, and to upgrade appropriately.