Описание
Security update for ovmf
This update for ovmf fixes the following issues:
- CVE-2026-25833: mbedtls: buffer overflow in the
x509_inet_pton_ipv6()function (bsc#1261476). - CVE-2026-25834: mbedtls: client accepts signature algorithm chosen by server even if not advertised in client hello (bsc#1261477).
- CVE-2026-25835: mbedtls: no pseudo-random number generator reseed when cloning an application (bsc#1261478).
- CVE-2026-34874: mbedtls: NULL pointer dereference in distinguished name parsing (bsc#1261469).
Список пакетов
openSUSE Leap 16.0
ovmf-202502-160000.5.1
ovmf-tools-202502-160000.5.1
qemu-ovmf-ia32-202502-160000.5.1
qemu-ovmf-x86_64-202502-160000.5.1
qemu-ovmf-x86_64-debug-202502-160000.5.1
qemu-uefi-aarch32-202502-160000.5.1
qemu-uefi-aarch64-202502-160000.5.1
qemu-uefi-riscv64-202502-160000.5.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1261469
- SUSE Bug 1261476
- SUSE Bug 1261477
- SUSE Bug 1261478
- SUSE CVE CVE-2026-25833 page
- SUSE CVE CVE-2026-25834 page
- SUSE CVE CVE-2026-25835 page
- SUSE CVE CVE-2026-34874 page
Описание
Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function
Затронутые продукты
openSUSE Leap 16.0:ovmf-202502-160000.5.1
openSUSE Leap 16.0:ovmf-tools-202502-160000.5.1
openSUSE Leap 16.0:qemu-ovmf-ia32-202502-160000.5.1
openSUSE Leap 16.0:qemu-ovmf-x86_64-202502-160000.5.1
Ссылки
- CVE-2026-25833
- SUSE Bug 1261476
- SUSE Bug 1262730
Описание
Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.
Затронутые продукты
openSUSE Leap 16.0:ovmf-202502-160000.5.1
openSUSE Leap 16.0:ovmf-tools-202502-160000.5.1
openSUSE Leap 16.0:qemu-ovmf-ia32-202502-160000.5.1
openSUSE Leap 16.0:qemu-ovmf-x86_64-202502-160000.5.1
Ссылки
- CVE-2026-25834
- SUSE Bug 1261477
- SUSE Bug 1262728
Описание
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
Затронутые продукты
openSUSE Leap 16.0:ovmf-202502-160000.5.1
openSUSE Leap 16.0:ovmf-tools-202502-160000.5.1
openSUSE Leap 16.0:qemu-ovmf-ia32-202502-160000.5.1
openSUSE Leap 16.0:qemu-ovmf-x86_64-202502-160000.5.1
Ссылки
- CVE-2026-25835
- SUSE Bug 1261478
- SUSE Bug 1262727
Описание
An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attacker to write to address 0.
Затронутые продукты
openSUSE Leap 16.0:ovmf-202502-160000.5.1
openSUSE Leap 16.0:ovmf-tools-202502-160000.5.1
openSUSE Leap 16.0:qemu-ovmf-ia32-202502-160000.5.1
openSUSE Leap 16.0:qemu-ovmf-x86_64-202502-160000.5.1
Ссылки
- CVE-2026-34874
- SUSE Bug 1261469
- SUSE Bug 1262646