ELSA-2023-7160

ELSA-2023-7160 - opensc security and bug fix update

Type:	SECURITY
Severity:	LOW
Release Date:	2023-11-17

Description

[0.20.0-6]
- Fix introduced issues tagged by coverity (RHEL-765)

[0.20.0-5]
- Avoid potential crash because of missing list terminator (#2196234)
- Fix CVE-2023-2977: potential buffer overrun in pkcs15 cardos_have_verifyrc_package (#2211093)
- Backport upstream changes regarding to reader removal (#2097048)

Related CVEs

CVE-2023-2977

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	opensc-0.20.0-6.el8.src.rpm	e356dd5b94cbd3452875fb943f8da0ff	-	ol8_aarch64_baseos_latest
	opensc-0.20.0-6.el8.src.rpm	e356dd5b94cbd3452875fb943f8da0ff	-	ol8_aarch64_u9_baseos_base
	opensc-0.20.0-6.el8.aarch64.rpm	80671d84b39a4ac50a68e3b6528c347d	-	ol8_aarch64_baseos_latest
	opensc-0.20.0-6.el8.aarch64.rpm	80671d84b39a4ac50a68e3b6528c347d	-	ol8_aarch64_u9_baseos_base
Oracle Linux 8 (x86_64)	opensc-0.20.0-6.el8.src.rpm	e356dd5b94cbd3452875fb943f8da0ff	-	ol8_x86_64_baseos_latest
	opensc-0.20.0-6.el8.src.rpm	e356dd5b94cbd3452875fb943f8da0ff	-	ol8_x86_64_u9_baseos_base
	opensc-0.20.0-6.el8.i686.rpm	3196bd69a6edf0cfc9b3e911bce47db7	-	ol8_x86_64_baseos_latest
	opensc-0.20.0-6.el8.i686.rpm	3196bd69a6edf0cfc9b3e911bce47db7	-	ol8_x86_64_u9_baseos_base
	opensc-0.20.0-6.el8.x86_64.rpm	7351020699f48df103cf2232b3008e43	-	ol8_x86_64_baseos_latest
	opensc-0.20.0-6.el8.x86_64.rpm	7351020699f48df103cf2232b3008e43	-	ol8_x86_64_u9_baseos_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team