Msrc Cbl2 Opensc 0.23.0-4 On Cbl Mariner 2.0 vulnerabilities

CVE-2024-1454 [LOW] CWE-416 Opensc: memory use after free in authentic driver when updating token info Opensc: memory use after free in authentic driver when updating token info FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of th

CVE-2023-5992 [MEDIUM] CWE-203 Opensc: side-channel leaks while stripping encryption pkcs#1 padding Opensc: side-channel leaks while stripping encryption pkcs#1 padding FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open so

CVE-2023-40660 [MEDIUM] CWE-287 Opensc: potential pin bypass when card tracks its own login state Opensc: potential pin bypass when card tracks its own login state FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source