Zhang Peng c028b36527 opensc: fix CVE-2024-45620 ...

CVE-2024-45620:
A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use
a crafted USB Device or Smart Card, which would present the system with a specially
crafted response to APDUs. When buffers are partially filled with data, initialized
parts of the buffer can be incorrectly accessed.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2024-45620]

Upstream patches:
[https://github.com/OpenSC/OpenSC/commit/a1bcc6516f43d570899820d259b71c53f8049168]
[https://github.com/OpenSC/OpenSC/commit/6baa19596598169d652659863470a60c5ed79ecd]
[https://github.com/OpenSC/OpenSC/commit/468a314d76b26f724a551f2eb339dd17c856cf18]

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>

2025-01-22 19:28:56 -05:00

..

files

opensc: fix CVE-2024-45620

2025-01-22 19:28:56 -05:00

opensc

opensc: Fix CVE-2023-40661

2024-02-07 18:41:41 -05:00

opensc_0.22.0.bb

opensc: fix CVE-2024-45620

2025-01-22 19:28:56 -05:00