Ubuntu
yubico-piv-tool package

yubico-piv-tool 1.4.2-2ubuntu0.1 source package in Ubuntu

Changelog

yubico-piv-tool (1.4.2-2ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Improper bounds checking leading to buffer overflow and
    out-of-bounds read
    - debian/patches/CVE-2018-14779: in ykpiv_transfer_data() handle overflow
      by exiting
    - debian/patches/CVE-2018-14780: in ykpiv_fetch_object() handle bogus
      length by returning
    - CVE-2018-14779
    - CVE-2018-14780

 -- Mike Salvatore <email address hidden>  Thu, 06 Feb 2020 17:13:56 -0500

Upload details

Uploaded by:
Mike Salvatore
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates universe misc
Bionic security universe misc

Downloads

File Size SHA-256 Checksum
yubico-piv-tool_1.4.2.orig.tar.gz 499.9 KiB 33a44018a1a88608058dfe685a4510640d818d4ebcbb2bdb021327497bb45d0a
yubico-piv-tool_1.4.2-2ubuntu0.1.debian.tar.xz 73.2 KiB bac851d034d3b4231a3360ac4c87c85f484a827071b6dda3c9348cffee40d123
yubico-piv-tool_1.4.2-2ubuntu0.1.dsc 2.4 KiB 9986a38dac1ad74b2404ef309f38176081b440f90958da314533134ba65d1b96

View changes file

Binary packages built by this source

libykpiv-dev: Development files for the YubiKey PIV Library

 The Yubico PIV tool is used for interacting with the Personal
 Identity Verification Card (PIV) application on a YubiKey. With it
 you may generate keys on the device, import keys and certificates,
 create certificate requests, and other operations. A shared library,
 a PKCS#11 module a command-line tool are included.
 .
 This package contains the development files for the library.

libykpiv1: Library for communication with the YubiKey PIV smartcard

 The Yubico PIV tool is used for interacting with the Personal
 Identity Verification Card (PIV) application on a YubiKey. With it
 you may generate keys on the device, import keys and certificates,
 create certificate requests, and other operations. A shared library,
 a PKCS#11 module a command-line tool are included.
 .
 This package contains the run-time shared library. You normally don't
 need to install it manually.

libykpiv1-dbgsym: debug symbols for libykpiv1
ykcs11: PKCS#11 module for the YubiKey PIV applet

 The Yubico PIV tool is used for interacting with the Personal
 Identity Verification Card (PIV) application on a YubiKey. With it
 you may generate keys on the device, import keys and certificates,
 create certificate requests, and other operations. A shared library,
 a PKCS#11 module a command-line tool are included.
 .
 This package contains the PKCS#11 module.

ykcs11-dbgsym: debug symbols for ykcs11
yubico-piv-tool: Command line tool for the YubiKey PIV applet

 The Yubico PIV tool is used for interacting with the Personal
 Identity Verification Card (PIV) application on a YubiKey. With it
 you may generate keys on the device, import keys and certificates,
 create certificate requests, and other operations. A shared library,
 a PKCS#11 module a command-line tool are included.
 .
 This package contains the command-line tool.

yubico-piv-tool-dbgsym: debug symbols for yubico-piv-tool