| Revision Date: | 2018-11-05 | Version: | 1 |
| Title: | Security update for opensc (Moderate) |
| Description: |
This update for opensc fixes the following issues:
- CVE-2018-16391: Fixed a denial of service when handling responses from a Muscle Card (bsc#1106998) - CVE-2018-16392: Fixed a denial of service when handling responses from a TCOS Card (bsc#1106999) - CVE-2018-16393: Fixed buffer overflows when handling responses from Gemsafe V1 Smartcards (bsc#1108318) - CVE-2018-16418: Fixed buffer overflow when handling string concatenation in util_acl_to_str (bsc#1107039) - CVE-2018-16419: Fixed several buffer overflows when handling responses from a Cryptoflex card (bsc#1107107) - CVE-2018-16420: Fixed buffer overflows when handling responses from an ePass 2003 Card (bsc#1107097) - CVE-2018-16422: Fixed single byte buffer overflow when handling responses from an esteid Card (bsc#1107038) - CVE-2018-16423: Fixed double free when handling responses from a smartcard (bsc#1107037) - CVE-2018-16426: Fixed endless recursion when handling responses from an IAS-ECC card (bsc#1107034) - CVE-2018-16427: Fixed out of bounds reads when handling responses in OpenSC (bsc#1107033)
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1104812
1106998
1106999
1107033
1107034
1107037
1107038
1107039
1107097
1107107
1108318
CVE-2018-16391
CVE-2018-16392
CVE-2018-16393
CVE-2018-16418
CVE-2018-16419
CVE-2018-16420
CVE-2018-16422
CVE-2018-16423
CVE-2018-16426
CVE-2018-16427
SUSE-SU-2018:3622-1
|
| Platform(s): | SUSE Linux Enterprise Desktop 12 SP3
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed AND opensc-0.13.0-3.3.2 is installed
|