OPENSUSE-SU-2024:11143-1 pam_p11-0.3.1-1.2 on GA media

These are all security issues fixed in the pamp11-0.3.1-1.2 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2019-16058

An issue was discovered in the pamp11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme...

PT-2019-14496

Name of the Vulnerable Software and Affected Versions OpenSC pam p11 component versions 0.2.0 through 0.3.0 Description An issue in the pam p11 component for OpenSC can cause a buffer overflow when a smart card creates a signature longer than 256 bytes. This may occur with RSA keys of 4096 bits,...