Red Hat Security Advisory

RHSA-2023:0530

libksba security update

Released 2023-01-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) libksba-1.3.0-7.el7_9, libksba-devel-1.3.0-7.el7_9
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libksba-1.3.0-7.el7_9, libksba-devel-1.3.0-7.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) libksba-1.3.0-7.el7_9, libksba-1.3.0-7.el7_9.ppc, libksba-devel-1.3.0-7.el7_9 +1
Red Hat Enterprise Linux Workstation Optional (v. 7) libksba-1.3.0-7.el7_9, libksba-devel-1.3.0-7.el7_9

TI-2022-23657 CVE-2022-47629 · GHSA-j4m3-g4pc-cph8

MEDIUM 45

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01674 Published 2022-12-20 Partial fix CWE-190