ELSA-2023-7876

ELSA-2023-7876 - opensc security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-12-18

Description

[0.20.0-7]
- Fix file caching with different offsets (RHEL-4077)
- Fix CVE-2023-40660: Potential PIN bypass
- Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
- Fix CVE-2023-5992: Marvin: Side-channel leaks while stripping encryption PKCS#1.5 padding

Related CVEs

CVE-2023-40661

CVE-2023-40660

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	opensc-0.20.0-7.el8_9.src.rpm	36bd4c84b717b883b6624a900315e01a	-	ol8_aarch64_baseos_latest
	opensc-0.20.0-7.el8_9.src.rpm	36bd4c84b717b883b6624a900315e01a	-	ol8_aarch64_u9_baseos_patch
	opensc-0.20.0-7.el8_9.aarch64.rpm	cbd450db17840ac31c86640f29f33657	-	ol8_aarch64_baseos_latest
	opensc-0.20.0-7.el8_9.aarch64.rpm	cbd450db17840ac31c86640f29f33657	-	ol8_aarch64_u9_baseos_patch
Oracle Linux 8 (x86_64)	opensc-0.20.0-7.el8_9.src.rpm	36bd4c84b717b883b6624a900315e01a	-	ol8_x86_64_baseos_latest
	opensc-0.20.0-7.el8_9.src.rpm	36bd4c84b717b883b6624a900315e01a	-	ol8_x86_64_u9_baseos_patch
	opensc-0.20.0-7.el8_9.i686.rpm	48a919847dc477e5c9d361107eac8bc4	-	ol8_x86_64_baseos_latest
	opensc-0.20.0-7.el8_9.i686.rpm	48a919847dc477e5c9d361107eac8bc4	-	ol8_x86_64_u9_baseos_patch
	opensc-0.20.0-7.el8_9.x86_64.rpm	3bcd0a24b53837bd8f36ef347b497063	-	ol8_x86_64_baseos_latest
	opensc-0.20.0-7.el8_9.x86_64.rpm	3bcd0a24b53837bd8f36ef347b497063	-	ol8_x86_64_u9_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team