Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2024:1402-2 Moderate: OpenSC Side-Channel Leak Mitigation

suse
Calendar Grey August 1, 2024
Dist Suse Esm H88
Important notice regarding opensc to address a moderate risk related to encryption padding vulnerabilities. Update immediately to ensure ongoing protection.
* bsc#1219386 Cross-References: * CVE-2023-5992

Summary

## This update for opensc fixes the following issues: * CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1402=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * opensc-0.22.0-150400.3.9.1 * opensc-debugsource-0.22.0-150400.3.9.1 * opensc-debuginfo-0.22.0-150400.3.9.1

Topics%20covered

Topics Covered

security advisory moderate severity encryption issue opensc SUSE Linux Enterprise Micro

References

* bsc#1219386

Cross-

* CVE-2023-5992

CVSS scores:

* CVE-2023-5992 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

* CVE-2023-5992 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products:

* SUSE Linux Enterprise Micro 5.5

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2023-5992.html

* https://bugzilla.suse.com/show_bug.cgi?id=1219386

Announcement ID: SUSE-SU-2024:1402-2
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate severity encryption issue opensc SUSE Linux Enterprise Micro

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here