shield Security update for opensc

SUSE-SLE-Module-Basesystem-15-SP6-2024-3444

This update for opensc fixes the following issues: - CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init. (bsc#1230076) - CVE-2024-45619: Incorrect handling length of buffers or files in libopensc. (bsc#1230075) - CVE-2024-45618: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init. (bsc#1230074) - CVE-2024-45617: Uninitialized values after incorrect or missing checking return values of functions in libopensc. (bsc#1230073) - CVE-2024-45616: Uninitialized values after incorrect check or usage of APDU response values in libopensc. (bsc#1230072) - CVE-2024-45615: Usage of uninitialized values in libopensc and pkcs15init. (bsc#1230071) - CVE-2024-8443: Heap buffer overflow in OpenPGP driver when generating key. (bsc#1230364)

Release Date

Sep 25 2024
References

Bugzilla: 1230071, 1230072, 1230364, 1230075, 1217722, 1230073, 1230074, 1230076
CVEs: CVE-2024-45615, CVE-2024-8443, CVE-2024-45620, CVE-2024-45617, CVE-2024-45616, CVE-2024-45618, CVE-2024-45619
Type

security
Severity

low

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.6 aarch64

Packages

opensc
Smart Card Utilities

0.22.0-150600.11.3.1 lock rpm lock src

Basesystem Module 15.6 ppc64le

Packages

opensc
Smart Card Utilities

0.22.0-150600.11.3.1 lock rpm lock src

Basesystem Module 15.6 s390x

Packages

opensc
Smart Card Utilities

0.22.0-150600.11.3.1 lock rpm lock src

Basesystem Module 15.6 x86_64

Packages

opensc
Smart Card Utilities

0.22.0-150600.11.3.1 lock rpm lock src