Amazon Linux 2 Security Advisory: ALAS-2024-2709
Advisory Release Date: 2024-12-05 01:02 Pacific
Advisory Updated Date: 2024-12-19 16:00 Pacific
FAQs regarding Amazon Linux ALAS/CVE Severity
It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. (CVE-2024-45615)
It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. (CVE-2024-45616)
It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. (CVE-2024-45617)
It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. (CVE-2024-45618)
It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. (CVE-2024-45619)
It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. (CVE-2024-45620)
Affected Packages:
opensc
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update opensc to update your system.
aarch64:
opensc-0.19.0-6.amzn2.0.2.aarch64
opensc-debuginfo-0.19.0-6.amzn2.0.2.aarch64
i686:
opensc-0.19.0-6.amzn2.0.2.i686
opensc-debuginfo-0.19.0-6.amzn2.0.2.i686
src:
opensc-0.19.0-6.amzn2.0.2.src
x86_64:
opensc-0.19.0-6.amzn2.0.2.x86_64
opensc-debuginfo-0.19.0-6.amzn2.0.2.x86_64