openSUSE Leap 16.0 Ovmf Major Buffer Overflow Vulnerability 2026-20875-1
opensuse
June 3, 2026
An update that solves 4 vulnerabilities and has 4 bug fixes can now be installed.
Description
This update for ovmf fixes the following issues:
- CVE-2026-25833: mbedtls: buffer overflow in the `x509_inet_pton_ipv6()` function (bsc#1261476).
- CVE-2026-25834: mbedtls: client accepts signature algorithm chosen by server even if not advertised in client hello
(bsc#1261477).
- CVE-2026-25835: mbedtls: no pseudo-random number generator reseed when cloning an application (bsc#1261478).
- CVE-2026-34874: mbedtls: NULL pointer dereference in distinguished name parsing (bsc#1261469).
Patch instructions:
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 16.0
zypper in -t patch openSUSE-Leap-16.0-865=1
Topics Covered
Patch
Package List
- openSUSE Leap 16.0:
ovmf-202502-160000.5.1
ovmf-tools-202502-160000.5.1
qemu-ovmf-ia32-202502-160000.5.1
qemu-ovmf-x86_64-202502-160000.5.1
qemu-ovmf-x86_64-debug-202502-160000.5.1
qemu-uefi-aarch32-202502-160000.5.1
qemu-uefi-aarch64-202502-160000.5.1
qemu-uefi-riscv64-202502-160000.5.1
References
* bsc#1261469
* bsc#1261476
* bsc#1261477
* bsc#1261478
References:
* https://www.suse.com/security/cve/CVE-2026-25833.html
* https://www.suse.com/security/cve/CVE-2026-25834.html
* https://www.suse.com/security/cve/CVE-2026-25835.html
* https://www.suse.com/security/cve/CVE-2026-34874.html
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2026:20875-1
Rating: important
Affected Products:
openSUSE Leap 16.0
-------------------------------------------------------------
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!