SUSE-SU-2026:21440-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202621440-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:21440-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:21440-1
- Upstream
- Related
- Published
- 2026-04-24T13:08:28Z
- Modified
- 2026-05-05T18:25:11Z
- Summary
- Security update for ovmf
- Details
-
This update for ovmf fixes the following issues:
- CVE-2026-25833: mbedtls: buffer overflow in the
x509_inet_pton_ipv6()function (bsc#1261476). - CVE-2026-25834: mbedtls: client accepts signature algorithm chosen by server even if not advertised in client hello (bsc#1261477).
- CVE-2026-25835: mbedtls: no pseudo-random number generator reseed when cloning an application (bsc#1261478).
- CVE-2026-34874: mbedtls: NULL pointer dereference in distinguished name parsing (bsc#1261469).
- CVE-2026-25833: mbedtls: buffer overflow in the
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-202621440-1/
- https://bugzilla.suse.com/1261469
- https://bugzilla.suse.com/1261476
- https://bugzilla.suse.com/1261477
- https://bugzilla.suse.com/1261478
- https://www.suse.com/security/cve/CVE-2026-25833
- https://www.suse.com/security/cve/CVE-2026-25834
- https://www.suse.com/security/cve/CVE-2026-25835
- https://www.suse.com/security/cve/CVE-2026-34874