SmartcardServices-Users

Download

smartcardservices-users@lists.macosforge.org

July 2018

1 participants
1 discussions

[SCSSU-201801] Addresses CVE-2018-4300 & CVE-2018-4301 in Project
by Shawn A. Geddis 31 Jul '18

31 Jul '18

SmartCardServices Community, I wanted to highlight that a security fix [SCSSU-201801] <http://smartcardservices.macosforge.org/trac/wiki/security> for addressing the following CVEs was merged into the project on May 28, 2018. They will be included in the next release of installers. However, each one of you that has developed your own Tokend for macOS, will want to ensure you pickup the changes. The fix was noted in PR-155 <https://github.com/smartcardservices/smartcardservices/pull/155> And the source code diffs are at Files Changed <https://github.com/smartcardservices/smartcardservices/pull/155/files> if any of you have any questions, fire away here on the list. - Shawn _____________________________________________________________________ Shawn Geddis geddis @ {icloud, me, mac} . com Security and Certifications Engineer geddis @ {apple} . com  Platform Security / SEAR Apple Inc. Smart Card Services Project/Dev Lead: Project Wiki: [https://smartcardservices.github.io <https://smartcardservices.github.io/>] Mailing Lists: [Lists.MacOSForge.Org/mailman/listinfo <http://lists.macosforge.org/mailman/listinfo>] SCS Contact: [scs-cotact(a)macosforge.org <mailto:scs-cotact@macosforge.org>] SCS Admin: [scs-admin(a)macosforge.org <mailto:scs-admin@macosforge.org>] _____________________________________________________________________

1 0