From b3c4988348850692480d1b964a8af8f9fd96deaa2f262802ea841e5ef29cd9f6 Mon Sep 17 00:00:00 2001 From: Jason Sikes Date: Mon, 8 Nov 2021 09:49:15 +0000 Subject: [PATCH] Accepting request 928634 from home:sbrabec:branches:security:chipcard Add refereces to security issues fixed in 0.22.0. OBS-URL: https://build.opensuse.org/request/show/928634 OBS-URL: https://build.opensuse.org/package/show/security:chipcard/opensc?expand=0&rev=68 --- opensc.changes | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/opensc.changes b/opensc.changes index 4354ac8..9b2d5e1 100644 --- a/opensc.changes +++ b/opensc.changes @@ -33,6 +33,13 @@ Mon Oct 4 12:59:24 UTC 2021 - Daniel Donisa * Fixed asking for a user pin when formatting a card (#1737) * Added support for French CPx Healthcare cards (#2217) * Added ATR for new CardOS 5.4 version (#2296) + * Fixes security issues: + * tcos: use after return (bsc#1192005, CVE-2021-42780) + * oberthur: use after free (bsc#1191992, CVE-2021-42779) + * oberthur: multiple heap buffer overflows (bsc#1192000, + CVE-2021-42781) + * multiple stack buffer overflow issues (bsc#1191957, + CVE-2021-42782) ------------------------------------------------------------------- Sun Jun 27 16:48:49 UTC 2021 - Predrag Ivanović