Fedora 38: 2024-b92d44f141 critical: opensc memory issue
fedora
March 16, 2024
New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454
Summary
OpenSC provides a set of libraries and utilities to work with smart cards. Its
main focus is on cards that support cryptographic operations, and facilitate
their use in security applications such as authentication, mail encryption and
digital signatures. OpenSC implements the PKCS#11 API so applications
supporting this API (such as Mozilla Firefox and Thunderbird) can use it. On
the card OpenSC implements the PKCS#15 standard and aims to be compatible with
every software/card that does so, too.
Update Information:
New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454
Change Log
* Thu Mar 7 2024 Veronika Hanulikova
References
[ 1 ] Bug #2263929 - CVE-2024-1454 opensc: Memory use after free in AuthentIC driver when updating token info
https://bugzilla.redhat.com/show_bug.cgi?id=2263929
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-b92d44f141' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: opensc
Product: Fedora 38
Version: 0.25.0
Release: 1.fc38
Summary: Smart card library and applications
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!