Security update for yubico-piv-tool (low)

2018-09-0515:12:05

lists.opensuse.org

0.002 Low

EPSS

Percentile

52.2%

JSON

This update for yubico-piv-tool fixes the following issues:

Security issues fixed:

CVE-2018-14779: Fixed an buffer overflow and an out of bounds memory
read in ykpiv_transfer_data(), which could be triggered by a malicious
token. (boo#1104809, YSA-2018-03)
CVE-2018-14780: Fixed an buffer overflow and an out of bounds memory
read in _ykpiv_fetch_object(), which could be triggered by a malicious
token. (boo#1104811, YSA-2018-03)

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.3i586yubico-piv-tool-debugsource< 0.1.6-7.3.1yubico-piv-tool-debugsource-0.1.6-7.3.1.i586.rpm
openSUSE Leap42.3i586libykpiv1< 0.1.6-7.3.1libykpiv1-0.1.6-7.3.1.i586.rpm
openSUSE Leap42.3x86_64libykpiv1< 0.1.6-7.3.1libykpiv1-0.1.6-7.3.1.x86_64.rpm
openSUSE Leap42.3x86_64yubico-piv-tool< 0.1.6-7.3.1yubico-piv-tool-0.1.6-7.3.1.x86_64.rpm
openSUSE Leap42.3x86_64libykpiv-devel< 0.1.6-7.3.1libykpiv-devel-0.1.6-7.3.1.x86_64.rpm
openSUSE Leap42.3i586yubico-piv-tool< 0.1.6-7.3.1yubico-piv-tool-0.1.6-7.3.1.i586.rpm
openSUSE Leap42.3x86_64yubico-piv-tool-debugsource< 0.1.6-7.3.1yubico-piv-tool-debugsource-0.1.6-7.3.1.x86_64.rpm
openSUSE Leap42.3i586libykpiv1-debuginfo< 0.1.6-7.3.1libykpiv1-debuginfo-0.1.6-7.3.1.i586.rpm
openSUSE Leap42.3i586libykpiv-devel< 0.1.6-7.3.1libykpiv-devel-0.1.6-7.3.1.i586.rpm
openSUSE Leap42.3i586yubico-piv-tool-debuginfo< 0.1.6-7.3.1yubico-piv-tool-debuginfo-0.1.6-7.3.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.3	i586	yubico-piv-tool-debugsource	< 0.1.6-7.3.1	yubico-piv-tool-debugsource-0.1.6-7.3.1.i586.rpm
openSUSE Leap	42.3	i586	libykpiv1	< 0.1.6-7.3.1	libykpiv1-0.1.6-7.3.1.i586.rpm
openSUSE Leap	42.3	x86_64	libykpiv1	< 0.1.6-7.3.1	libykpiv1-0.1.6-7.3.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	yubico-piv-tool	< 0.1.6-7.3.1	yubico-piv-tool-0.1.6-7.3.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	libykpiv-devel	< 0.1.6-7.3.1	libykpiv-devel-0.1.6-7.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	yubico-piv-tool	< 0.1.6-7.3.1	yubico-piv-tool-0.1.6-7.3.1.i586.rpm
openSUSE Leap	42.3	x86_64	yubico-piv-tool-debugsource	< 0.1.6-7.3.1	yubico-piv-tool-debugsource-0.1.6-7.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	libykpiv1-debuginfo	< 0.1.6-7.3.1	libykpiv1-debuginfo-0.1.6-7.3.1.i586.rpm
openSUSE Leap	42.3	i586	libykpiv-devel	< 0.1.6-7.3.1	libykpiv-devel-0.1.6-7.3.1.i586.rpm
openSUSE Leap	42.3	i586	yubico-piv-tool-debuginfo	< 0.1.6-7.3.1	yubico-piv-tool-debuginfo-0.1.6-7.3.1.i586.rpm