Oval Definition:oval:org.mitre.oval:def:13396
Revision Date:2014-06-23Version:20
Title:DSA-1734-1 opensc -- programming error
Description:b.badrignans discovered that OpenSC, a set of smart card utilities, could stores private data on a smart card without proper access restrictions. Only blank cards initialised with OpenSC are affected by this problem. This update only improves creating new private data objects, but cards already initialised with such private data objects need to be modified to repair the access control conditions on such cards. For the stable distribution, this problem has been fixed in version 0.11.4-5+lenny1. For the unstable distribution, this problem wil be fixed soon. We recommend that you upgrade your opensc package and recreate any private data objects stored on your smart cards.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-0368
DSA-1734-1
Platform(s):Debian GNU/Linux 5.0
Product(s):opensc
Definition Synopsis
  • Debian GNU/Linux 5.0 is installed
  • AND Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is powerpc
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is mipsel
  • OR Installed architecture is arm
  • AND Packages section
  • libopensc2 DPKG is earlier than 0.11.4-5+lenny1
  • OR libopensc2-dev DPKG is earlier than 0.11.4-5+lenny1
  • OR opensc DPKG is earlier than 0.11.4-5+lenny1
  • OR mozilla-opensc DPKG is earlier than 0.11.4-5+lenny1
  • OR libopensc2-dbg DPKG is earlier than 0.11.4-5+lenny1
  • BACK