Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 27: 2018-3b7ed4c483 Critical: libgcrypt Buffer Overflow Patch

fedora
Calendar Grey March 3, 2017
Dist Fedora Esm H88
Fedora 25 upgrades libcacard to version 2.5.3 addressing memory leaks; important revision for CAC functionality.
new upstream release 2.5.3, fixing leaks

Summary

This library provides emulation of smart cards to a virtual card

reader running in a guest virtual machine.

It implements DoD CAC standard with separate pki containers(compatible coolkey), using certificates read from NSS.

Update Information:

new upstream release 2.5.3, fixing leaks

Topics%20covered

Topics Covered

security advisory software update Fedora memory leak libcacard

Change Log

References


[ 1 ] Bug #1427833 - CVE-2017-6414 Qemu: libcacard: host memory leakage while creating new APDU https://bugzilla.redhat.com/show_bug.cgi?id=1427833

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libcacard' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libcacard
Product: Fedora 25
Version: 2.5.3
Release: 1.fc25
URL: Summary : CAC (Common Access Card) library

Topics%20covered

Topics Covered

security advisory software update Fedora memory leak libcacard

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here