ELSA-2021-1600 — Moderate: opensc security, bug fix, and enhancement update (Oracle Linux 8)

Summary

[0.20.0-4]
- Use file cache by default (#1892810)
- Avoid calloc with 0 argument (#1895401)

[0.20.0-3]
- Support PIN change for HID Alt tokens (#1830901)
- Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572
- Fix right padding of token labels of some cards (#1877973)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	opensc	0:0.20.0-4.el8

Vulnerabilities 3

Unscored —

CVE-2020-26570

The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_rea…

opensc opensc opensc opensc Debian Ubuntu Azure Linux Alpine

Oct 6, 2020
Unscored —

CVE-2020-26571

The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15em…

opensc opensc opensc opensc Debian Ubuntu Azure Linux Alpine

Oct 6, 2020
Unscored —

CVE-2020-26572

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.

opensc opensc opensc opensc Debian Ubuntu Azure Linux Alpine

Oct 6, 2020

Moderate: opensc security, bug fix, and enhancement update (Oracle Linux 8)

Summary

Fixed packages 1

Vulnerabilities 3

The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_rea…

The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15em…

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.