SHA256
1
0
forked from pool/opensc

Accepting request 932929 from home:pgajdos

* CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)

OBS-URL: https://build.opensuse.org/request/show/932929
OBS-URL: https://build.opensuse.org/package/show/security:chipcard/opensc?expand=0&rev=70
This commit is contained in:
Jason Sikes 2021-11-22 09:22:08 +00:00 committed by Git OBS Bridge
parent 49f73bbe48
commit 0304fc1dad

View File

@ -98,7 +98,8 @@ Fri Nov 27 19:27:30 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
* CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747) * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
* CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746) * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
* CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256) * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
* CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307) * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
* CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
* Support RSA-PSS signature mechanisms using RSA-RAW * Support RSA-PSS signature mechanisms using RSA-RAW
* Added memory locking for secrets * Added memory locking for secrets
* added support for terminal colors * added support for terminal colors