A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be initialized (as arguments to other functions, etc.).
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "opensc", "binary_version": "0.20.0-3ubuntu0.1~esm4" }, { "binary_name": "opensc-dbgsym", "binary_version": "0.20.0-3ubuntu0.1~esm4" }, { "binary_name": "opensc-pkcs11", "binary_version": "0.20.0-3ubuntu0.1~esm4" }, { "binary_name": "opensc-pkcs11-dbgsym", "binary_version": "0.20.0-3ubuntu0.1~esm4" } ] }
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "opensc", "binary_version": "0.22.0-1ubuntu2+esm1" }, { "binary_name": "opensc-dbgsym", "binary_version": "0.22.0-1ubuntu2+esm1" }, { "binary_name": "opensc-pkcs11", "binary_version": "0.22.0-1ubuntu2+esm1" }, { "binary_name": "opensc-pkcs11-dbgsym", "binary_version": "0.22.0-1ubuntu2+esm1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "opensc", "binary_version": "0.25.1-2ubuntu1.1" }, { "binary_name": "opensc-dbgsym", "binary_version": "0.25.1-2ubuntu1.1" }, { "binary_name": "opensc-pkcs11", "binary_version": "0.25.1-2ubuntu1.1" }, { "binary_name": "opensc-pkcs11-dbgsym", "binary_version": "0.25.1-2ubuntu1.1" } ] }
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "opensc", "binary_version": "0.25.0~rc1-1ubuntu0.1~esm1" }, { "binary_name": "opensc-dbgsym", "binary_version": "0.25.0~rc1-1ubuntu0.1~esm1" }, { "binary_name": "opensc-pkcs11", "binary_version": "0.25.0~rc1-1ubuntu0.1~esm1" }, { "binary_name": "opensc-pkcs11-dbgsym", "binary_version": "0.25.0~rc1-1ubuntu0.1~esm1" } ] }