SUSE-SU-2025:20671-1

CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386).
CVE-2024-8443: Heap buffer overflow in OpenPGP driver when generating key (bsc#1230364).
CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init (bsc#1230076).
CVE-2024-45619: Incorrect handling length of buffers or files in libopensc (bsc#1230075).
CVE-2024-45618: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init (bsc#1230074).
CVE-2024-45617: Uninitialized values after incorrect or missing checking return values of functions in libopensc (bsc#1230073).
CVE-2024-45616: Uninitialized values after incorrect check or usage of APDU response values in libopensc (bsc#1230072).
CVE-2024-45615: Usage of uninitialized values in libopensc and pkcs15init (bsc#1230071).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.24.0-slfo.1.1_2.1

{
    "binaries": [
        {
            "opensc": "0.24.0-slfo.1.1_2.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20671-1.json"