[CLSA-2023:1701445345] libksba: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2023-12-01
Description:
- CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser
Updated packages:
  • libksba-1.3.5-7.el8.tuxcare.els1.i686.rpm
    sha:4c4057bbd390099f4d4c27c56775bcb44a00f62d
  • libksba-1.3.5-7.el8.tuxcare.els1.x86_64.rpm
    sha:fa273b163004b997cf0c199508cb0ab29b28a1f3
  • libksba-devel-1.3.5-7.el8.tuxcare.els1.i686.rpm
    sha:a2dc310649e175f6e2bc58624570b34a149b9199
  • libksba-devel-1.3.5-7.el8.tuxcare.els1.x86_64.rpm
    sha:78d684aa3269ed5a4dc17a0ea8c0583b52bbf2d1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.