gpp_maybe Security update for ovmf

SUSE-SLE-Module-Server-Applications-15-SP7-2026-1952

This update for ovmf fixes the following issues - CVE-2026-25833: mbedtls: buffer underflow in x509_inet_pton_ipv6() (bsc#1261476). - CVE-2026-25834: mbedtls: Algorithm downgrade vulnerability (bsc#1261477). - CVE-2026-25835: mbedtls: PSA random generator cloning (bsc#1261478). - CVE-2026-34874: mbedtls: NULL pointer dereference when setting a distinguished name (bsc#1261469). Changes for ovmf: - Update mbedtls to 3.6.6.

• Release Date
  May 18 2026
• References
  Bugzilla: 1261469, 1261476, 1261477, 1261478
  CVEs: CVE-2026-25833, CVE-2026-25834, CVE-2026-25835, CVE-2026-34874
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.7 aarch64

• Packages
  ovmf
  Open Virtual Machine Firmware

  202408-150700.3.18.1 lock rpm lock src

  ovmf-tools
  The BaseTools from edk2

  202408-150700.3.18.1 lock rpm

  qemu-uefi-aarch64
  UEFI QEMU rom image (AArch64)

  202408-150700.3.18.1 lock rpm

Server Applications Module 15.7 x86_64

• Packages
  ovmf
  Open Virtual Machine Firmware

  202408-150700.3.18.1 lock rpm lock src

  ovmf-tools
  The BaseTools from edk2

  202408-150700.3.18.1 lock rpm

  qemu-ovmf-x86_64
  Open Virtual Machine Firmware - QEMU rom images (x86_64)

  202408-150700.3.18.1 lock rpm