Описание
Security update for ovmf
This update for ovmf fixes the following issue:
- CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
Список пакетов
SUSE Linux Enterprise Module for Package Hub 15 SP7
qemu-ovmf-x86_64-202408-150700.3.15.1
qemu-ovmf-x86_64-debug-202408-150700.3.15.1
qemu-uefi-aarch32-202408-150700.3.15.1
qemu-uefi-aarch64-202408-150700.3.15.1
SUSE Linux Enterprise Module for Server Applications 15 SP7
ovmf-202408-150700.3.15.1
ovmf-tools-202408-150700.3.15.1
qemu-ovmf-x86_64-202408-150700.3.15.1
qemu-uefi-aarch64-202408-150700.3.15.1
Ссылки
- Link for SUSE-SU-2026:1413-1
- E-Mail link for SUSE-SU-2026:1413-1
- SUSE Security Ratings
- SUSE Bug 1252441
- SUSE CVE CVE-2025-59438 page
Описание
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.
Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ovmf-x86_64-202408-150700.3.15.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ovmf-x86_64-debug-202408-150700.3.15.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-uefi-aarch32-202408-150700.3.15.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-uefi-aarch64-202408-150700.3.15.1
Ссылки
- CVE-2025-59438
- SUSE Bug 1252433