Описание
Security update for ovmf
This update for ovmf fixes the following issues
- CVE-2026-25833: mbedtls: buffer underflow in x509_inet_pton_ipv6() (bsc#1261476).
- CVE-2026-25834: mbedtls: Algorithm downgrade vulnerability (bsc#1261477).
- CVE-2026-25835: mbedtls: PSA random generator cloning (bsc#1261478).
- CVE-2026-34874: mbedtls: NULL pointer dereference when setting a distinguished name (bsc#1261469).
Changes for ovmf:
- Update mbedtls to 3.6.6.
Список пакетов
SUSE Linux Enterprise Module for Package Hub 15 SP7
qemu-ovmf-x86_64-202408-150700.3.18.1
qemu-ovmf-x86_64-debug-202408-150700.3.18.1
qemu-uefi-aarch32-202408-150700.3.18.1
qemu-uefi-aarch64-202408-150700.3.18.1
SUSE Linux Enterprise Module for Server Applications 15 SP7
ovmf-202408-150700.3.18.1
ovmf-tools-202408-150700.3.18.1
qemu-ovmf-x86_64-202408-150700.3.18.1
qemu-uefi-aarch64-202408-150700.3.18.1
Ссылки
- Link for SUSE-SU-2026:1952-1
- E-Mail link for SUSE-SU-2026:1952-1
- SUSE Security Ratings
- SUSE Bug 1261469
- SUSE Bug 1261476
- SUSE Bug 1261477
- SUSE Bug 1261478
- SUSE CVE CVE-2026-25833 page
- SUSE CVE CVE-2026-25834 page
- SUSE CVE CVE-2026-25835 page
- SUSE CVE CVE-2026-34874 page
Описание
Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function
Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ovmf-x86_64-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ovmf-x86_64-debug-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-uefi-aarch32-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-uefi-aarch64-202408-150700.3.18.1
Ссылки
- CVE-2026-25833
- SUSE Bug 1261476
- SUSE Bug 1262730
Описание
Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.
Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ovmf-x86_64-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ovmf-x86_64-debug-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-uefi-aarch32-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-uefi-aarch64-202408-150700.3.18.1
Ссылки
- CVE-2026-25834
- SUSE Bug 1261477
- SUSE Bug 1262728
Описание
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ovmf-x86_64-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ovmf-x86_64-debug-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-uefi-aarch32-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-uefi-aarch64-202408-150700.3.18.1
Ссылки
- CVE-2026-25835
- SUSE Bug 1261478
- SUSE Bug 1262727
Описание
An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attacker to write to address 0.
Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ovmf-x86_64-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ovmf-x86_64-debug-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-uefi-aarch32-202408-150700.3.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-uefi-aarch64-202408-150700.3.18.1
Ссылки
- CVE-2026-34874
- SUSE Bug 1261469
- SUSE Bug 1262646