Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a337ae28 by Salvatore Bonaccorso at 2019-12-03T07:21:14Z
Add information on CVE-2019-19481
- - - - -
cf8d8635 by Salvatore Bonaccorso at 2019-12-03T07:24:00Z
Update status on CVE-2019-19481/opensc
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -141,10 +141,16 @@ CVE-2019-19483
CVE-2019-19482
RESERVED
CVE-2019-19481 (An issue was discovered in OpenSC through 0.19.0 and 0.20.x
through 0. ...)
- - opensc <unfixed>
+ - opensc 0.19.0~rc1-1
+ [stretch] - opensc <not-affected> (Vulnerable code not present)
[jessie] - opensc <not-affected> (Vulnerable code not present)
NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18618
+ NOTE: CAC support added in:
https://github.com/OpenSC/OpenSC/commit/777e2a3751e3f6d53f056c98e9e20e42af674fb1
(0.17.0-rc1)
+ NOTE: Drop support of CAC1:
https://github.com/OpenSC/OpenSC/commit/2190bb927c739852266481d6517aaf3a07b52526
(0.19.0-rc1)
+ NOTE: Restored minimal CAC1 driver support:
https://github.com/OpenSC/OpenSC/commit/e2b1fb81e0e1339eebaa36fb90635e03f69d4da3
(0.20.0-rc1)
NOTE:
https://github.com/OpenSC/OpenSC/commit/b75c002cfb1fd61cd20ec938ff4937d7b1a94278
+ NOTE: Mark 0.19.0~rc1 based version as fixed which removed the affected
code, which
+ NOTE: later was re-introduced upstream in 0.20.0~rc1 again.
CVE-2019-19480 (An issue was discovered in OpenSC through 0.19.0 and 0.20.x
through 0. ...)
- opensc <unfixed>
[jessie] - opensc <not-affected> (Vulnerable code not present)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/837aaacfe58bfe31efa01711756a3ae0d0841b80...cf8d8635d2a0894501054e689bb56b03cebad77b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/837aaacfe58bfe31efa01711756a3ae0d0841b80...cf8d8635d2a0894501054e689bb56b03cebad77b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
