ELSA-2023-6587

ELSA-2023-6587 - opensc security update

Type:	SECURITY
Severity:	LOW
Release Date:	2023-11-11

Description

[0.23.0-2]
- Fix regression in handling OpenPGP cards
- Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos

[0.23.0-1]
- Rebase to latest 0.23.0 release (#2100409)
- Use separate OpenSSL context to work better from inside of OpenSSL providers

Related CVEs

CVE-2023-2977

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	opensc-0.23.0-2.el9.src.rpm	d29bbb369273565396e77f6057f03266	-	ol9_aarch64_baseos_latest
	opensc-0.23.0-2.el9.src.rpm	d29bbb369273565396e77f6057f03266	-	ol9_aarch64_u3_baseos_base
	opensc-0.23.0-2.el9.aarch64.rpm	8537cfe84b5a48342d2eaaf2683a4b3d	-	ol9_aarch64_baseos_latest
	opensc-0.23.0-2.el9.aarch64.rpm	8537cfe84b5a48342d2eaaf2683a4b3d	-	ol9_aarch64_u3_baseos_base
Oracle Linux 9 (x86_64)	opensc-0.23.0-2.el9.src.rpm	d29bbb369273565396e77f6057f03266	-	ol9_x86_64_baseos_latest
	opensc-0.23.0-2.el9.src.rpm	d29bbb369273565396e77f6057f03266	-	ol9_x86_64_u3_baseos_base
	opensc-0.23.0-2.el9.i686.rpm	1d764a4efbb3d806e38b6babdfeb548e	-	ol9_x86_64_baseos_latest
	opensc-0.23.0-2.el9.i686.rpm	1d764a4efbb3d806e38b6babdfeb548e	-	ol9_x86_64_u3_baseos_base
	opensc-0.23.0-2.el9.x86_64.rpm	76f754102bb6f7f75ca3f6ebe517482d	-	ol9_x86_64_baseos_latest
	opensc-0.23.0-2.el9.x86_64.rpm	76f754102bb6f7f75ca3f6ebe517482d	-	ol9_x86_64_u3_baseos_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team