Red Hat Security Advisory: opensc security update
An update for opensc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-4535US | low3.8 | — | ||
An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have p… | ||||
| CVE-2023-40661US | medium6.4 | — | ||
Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards.… | ||||
| CVE-2023-40660US | medium6.6 | — | ||
A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2023:7879self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 2240912external
- 2240913external
- 2240914external
- Canonical URLself
remediations (48)
- Fixedopensc-0:0.23.0-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-0:0.23.0-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debuginfo-0:0.23.0-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879 - Fixedopensc-debugsource-0:0.23.0-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:7879
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan