CLSA-2026-1787393949

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1787393949.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1787393949
Upstream
CVE (2)
Published
2026-08-22T10:19:20Z
Modified
2026-10-26T09:31:30Z
Summary
opensc: Fix of 2 CVEs
Details
  • CVE-2024-8443: fix heap buffer overflow in the OpenPGP driver when writing the key fingerprint, reject key responses not matching the requested algorithm and set the EC point length from the received response
  • CVE-2026-10275: fix buffer overflow in pkcs11-tool when copying a token supplied CKA_ID into the object id buffer
References

Affected packages

TuxCare:AlmaLinux:9.6 / opensc

Package

Name
opensc
Purl
pkg:rpm/tuxcare/opensc?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.23.0-5.el9.tuxcare.els6

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1787393949.json"