Medium ELSA-2020-4483 5 CVEs

Moderate: opensc security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[0.20.0-2]
- Unbreak different CardOS 5 configurations supporting raw RSA (#1830856)

[0.20.0-1]
- Rebase to current upstream release (#1810660)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	opensc	0:0.20.0-2.el8

Vulnerabilities 5

Unscored —

CVE-2019-15945

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.

opensc opensc opensc Debian Ubuntu Alpine

Sep 5, 2019
Unscored —

CVE-2019-15946

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.

opensc opensc opensc Debian Ubuntu Alpine

Sep 5, 2019
Unscored —

CVE-2019-19479

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrec…

opensc opensc opensc Debian Ubuntu Alpine

Dec 1, 2019
Unscored —

CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer…

opensc opensc opensc Debian Ubuntu Alpine

Dec 1, 2019
Unscored —

CVE-2019-20792

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolke…

opensc opensc Debian Ubuntu

Apr 29, 2020