Medium ELSA-2024-0967 1 CVE

Moderate: opensc security update (Oracle Linux 8)

Published Feb 26, 2024 · Updated Feb 26, 2024

Ecosystem: Oracle Linux

Summary

[0.20.0-8]
- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	opensc	0:0.20.0-8.el8_9

Vulnerabilities 1

Medium 5.6

CVE-2023-5992

Opensc: side-channel leaks while stripping encryption pkcs#1 padding

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine

Jan 31, 2024