[CLSA-2026:1788870088] opensc: Fix of CVE-2024-8443
Type:
security
Severity:
Low
Release date:
2026-09-08 12:21:39 UTC
Description:
- CVE-2024-8443: reject non-matching OpenPGP key responses, avoid a buffer overflow when writing the fingerprint, and set ecpoint_len from the received length instead of the requested field length
CVEs fixed:
Updated packages:
  • opensc-0.22.0-2.el9_2.tuxcare.els10.i686.rpm
    sha:06f99a3ed510873d3da7af78868cb323ca692177776b3d6177fc970c2f1c29f8
  • opensc-0.22.0-2.el9_2.tuxcare.els10.x86_64.rpm
    sha:a8e7f9bc5cf88d2e6f57188e4af46b478086a6306556600be1c5c034a41e4e68
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.