Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:1402-1

Опубликовано: 23 апр. 2024
Источник: suse-cvrf

Описание

Security update for opensc

This update for opensc fixes the following issues:

  • CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386)

Список пакетов

Image SLES15-SP4-Hardened-BYOS
opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-Hardened-BYOS-Azure
opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-Hardened-BYOS-EC2
opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-Hardened-BYOS-GCE
opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-SAP-Hardened
opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-SAP-Hardened-Azure
opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-SAP-Hardened-BYOS
opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-SAP-Hardened-GCE
opensc-0.22.0-150400.3.9.1
Image SLES15-SP5-Hardened-BYOS-Azure
opensc-0.22.0-150400.3.9.1
Image SLES15-SP5-Hardened-BYOS-EC2
opensc-0.22.0-150400.3.9.1
Image SLES15-SP5-Hardened-BYOS-GCE
opensc-0.22.0-150400.3.9.1
Image SLES15-SP5-SAP-Hardened-Azure
opensc-0.22.0-150400.3.9.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
opensc-0.22.0-150400.3.9.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
opensc-0.22.0-150400.3.9.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
opensc-0.22.0-150400.3.9.1
Image SLES15-SP5-SAP-Hardened-GCE
opensc-0.22.0-150400.3.9.1
SUSE Linux Enterprise Micro 5.3
opensc-0.22.0-150400.3.9.1
SUSE Linux Enterprise Micro 5.4
opensc-0.22.0-150400.3.9.1
SUSE Linux Enterprise Micro 5.5
opensc-0.22.0-150400.3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
opensc-0.22.0-150400.3.9.1
openSUSE Leap 15.5
opensc-0.22.0-150400.3.9.1
opensc-32bit-0.22.0-150400.3.9.1
openSUSE Leap Micro 5.3
opensc-0.22.0-150400.3.9.1
openSUSE Leap Micro 5.4
opensc-0.22.0-150400.3.9.1

Ссылки

Описание

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

Затронутые продукты
Image SLES15-SP4-Hardened-BYOS-Azure:opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-Hardened-BYOS-EC2:opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-Hardened-BYOS-GCE:opensc-0.22.0-150400.3.9.1
Image SLES15-SP4-Hardened-BYOS:opensc-0.22.0-150400.3.9.1
Ссылки
Уязвимость SUSE-SU-2024:1402-1