Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:14835-1

Опубликовано: 29 окт. 2021
Источник: suse-cvrf

Описание

Security update for opensc

This update for opensc fixes the following issues:

  • CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).
  • CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
libopensc2-0.11.6-5.27.14.1
opensc-0.11.6-5.27.14.1
SUSE Linux Enterprise Server 11 SP4-LTSS
libopensc2-0.11.6-5.27.14.1
libopensc2-32bit-0.11.6-5.27.14.1
opensc-0.11.6-5.27.14.1
opensc-32bit-0.11.6-5.27.14.1

Описание

A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library.


Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libopensc2-0.11.6-5.27.14.1
SUSE Linux Enterprise Point of Sale 11 SP3:opensc-0.11.6-5.27.14.1
SUSE Linux Enterprise Server 11 SP4-LTSS:libopensc2-0.11.6-5.27.14.1
SUSE Linux Enterprise Server 11 SP4-LTSS:libopensc2-32bit-0.11.6-5.27.14.1

Ссылки

Описание

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.


Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libopensc2-0.11.6-5.27.14.1
SUSE Linux Enterprise Point of Sale 11 SP3:opensc-0.11.6-5.27.14.1
SUSE Linux Enterprise Server 11 SP4-LTSS:libopensc2-0.11.6-5.27.14.1
SUSE Linux Enterprise Server 11 SP4-LTSS:libopensc2-32bit-0.11.6-5.27.14.1

Ссылки