From 0304fc1dadc9248418fe080b393a09ed2b89373826cb3dc55b952bee605d929d Mon Sep 17 00:00:00 2001 From: Jason Sikes Date: Mon, 22 Nov 2021 09:22:08 +0000 Subject: [PATCH] Accepting request 932929 from home:pgajdos * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307) * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809) OBS-URL: https://build.opensuse.org/request/show/932929 OBS-URL: https://build.opensuse.org/package/show/security:chipcard/opensc?expand=0&rev=70 --- opensc.changes | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/opensc.changes b/opensc.changes index 0e86358..397f819 100644 --- a/opensc.changes +++ b/opensc.changes @@ -98,7 +98,8 @@ Fri Nov 27 19:27:30 UTC 2020 - Andreas Stieger * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747) * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746) * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256) - * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307) + * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307) + * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809) * Support RSA-PSS signature mechanisms using RSA-RAW * Added memory locking for secrets * added support for terminal colors