New package: Thales.SafeNetAuthenticationClient version 10.8.2154.0

[ye4241]

Checklist for Pull Requests

• Have you signed the Contributor License Agreement?
• Is there a linked Issue?

Manifests

• Have you checked that there aren't other open pull requests for the same manifest update/change?
• This PR only modifies one (1) manifest
• Have you validated your manifest locally with winget validate --manifest <path>?
• Have you tested your manifest locally with winget install --manifest <path>?
• Does your manifest conform to the 1.6 schema?

Note: <path> is the directory's name containing the manifest you're submitting.

---

Microsoft Reviewers: Open in CodeFlow

[wingetbot]

   

[wingetbot]

/AzurePipelines run

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[stephengillie]

Verify:

This is a tray-based application.

[stephengillie]

Edit: Apologies, I used an out-of-date option in my automation.

[wingetbot]

Commenter does not have sufficient privileges for PR 170570

[stephengillie]

Hi @ye4241,

Could you add a PackageUrl?

[wingetbot]

/AzurePipelines run

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[ye4241]

@stephengillie Done.

[stephengillie]

@stephengillie Done.

Thanks.

I'm having trouble finding the InstallerUrl - is it linked from another page?

[ye4241]

@stephengillie

https://knowledge.digicert.com/general-information/how-to-download-safenet-authentication-client

[stephengillie]

Verify:

[wingetbot]

Publish pipeline succeeded for this Pull Request. Once you refresh your index, this change should be present.

[R-Adrian]

please note that this is an older version and is affected by multiple CVEs:

CVE-2023-7016
A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access.

CVE-2023-5993
A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access.

There is a newer version available for download at DigiCert's page, version 10.9 (10.9.3283.0) ... so i opened an issue for that: #173741