Medium ELSA-2024-0966 1 CVE

Moderate: opensc security update (Oracle Linux 9)

Published Feb 26, 2024 · Updated Feb 26, 2024

Ecosystem: Oracle Linux

Summary

[0.23.0-4]
- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	opensc	0:0.23.0-4.el9_3

Vulnerabilities 1

Medium 5.6

CVE-2023-5992

Opensc: side-channel leaks while stripping encryption pkcs#1 padding

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine

Jan 31, 2024