Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:0967

Опубликовано: 07 мая 2025
Источник: rocky
Оценка: Moderate

Описание

Moderate: opensc security update

The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.

Security Fix(es):

  • OpenSC: Side-channel leaks while stripping encryption PKCS#1 padding (CVE-2023-5992)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
opensci6868.el8_9opensc-0.20.0-8.el8_9.i686.rpm
openscx86_648.el8_9opensc-0.20.0-8.el8_9.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 5.6
ubuntu
почти 2 года назад

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

CVSS3: 5.6
redhat
почти 2 года назад

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

CVSS3: 5.6
nvd
почти 2 года назад

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

CVSS3: 5.9
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 5.6
debian
почти 2 года назад

A vulnerability was found in OpenSC where PKCS#1 encryption padding re ...