shield Security update for ovmf
SUSE-SLES-16.0-514


This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).

  • Release Date
    Apr 9 2026
  • References
    Bugzilla: 1252441
    CVEs: CVE-2025-59438
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64
  • Packages
    ovmf
    Open Virtual Machine Firmware
    202502-160000.4.1 lock rpm
    ovmf-tools
    The BaseTools from edk2
    202502-160000.4.1 lock rpm
    qemu-ovmf-x86_64
    Open Virtual Machine Firmware - QEMU rom images (x86_64)
    202502-160000.4.1 lock rpm
    qemu-uefi-aarch64
    UEFI QEMU rom image (AArch64)
    202502-160000.4.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
  • Packages
    ovmf
    Open Virtual Machine Firmware
    202502-160000.4.1 lock rpm
    ovmf-tools
    The BaseTools from edk2
    202502-160000.4.1 lock rpm
    qemu-ovmf-x86_64
    Open Virtual Machine Firmware - QEMU rom images (x86_64)
    202502-160000.4.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
  • Packages
    ovmf
    Open Virtual Machine Firmware
    202502-160000.4.1 lock rpm
    ovmf-tools
    The BaseTools from edk2
    202502-160000.4.1 lock rpm
    qemu-ovmf-x86_64
    Open Virtual Machine Firmware - QEMU rom images (x86_64)
    202502-160000.4.1 lock rpm