Описание
Security update for ovmf
This update for ovmf fixes the following issue:
- CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
Список пакетов
openSUSE Leap 16.0
ovmf-202502-160000.4.1
ovmf-tools-202502-160000.4.1
qemu-ovmf-ia32-202502-160000.4.1
qemu-ovmf-x86_64-202502-160000.4.1
qemu-ovmf-x86_64-debug-202502-160000.4.1
qemu-uefi-aarch32-202502-160000.4.1
qemu-uefi-aarch64-202502-160000.4.1
qemu-uefi-riscv64-202502-160000.4.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1252441
- SUSE CVE CVE-2025-59438 page
Описание
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.
Затронутые продукты
openSUSE Leap 16.0:ovmf-202502-160000.4.1
openSUSE Leap 16.0:ovmf-tools-202502-160000.4.1
openSUSE Leap 16.0:qemu-ovmf-ia32-202502-160000.4.1
openSUSE Leap 16.0:qemu-ovmf-x86_64-202502-160000.4.1
Ссылки
- CVE-2025-59438
- SUSE Bug 1252433