Red Hat Security Advisory: opensc security, bug fix, and enhancement update

Fixed packages 3

Vulnerabilities 5

• Unscored —
  CVE-2019-15945

  OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.

  opensc opensc opensc Debian Ubuntu Alpine
  Sep 5, 2019
• Unscored —
  CVE-2019-15946

  OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.

  opensc opensc opensc Debian Ubuntu Alpine
  Sep 5, 2019
• Unscored —
  CVE-2019-19479

  An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrec…

  opensc opensc opensc Debian Ubuntu Alpine
  Dec 1, 2019
• Unscored —
  CVE-2019-19481

  An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer…

  opensc opensc opensc Debian Ubuntu Alpine
  Dec 1, 2019
• Unscored —
  CVE-2019-20792

  OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolke…

  opensc opensc Debian Ubuntu
  Apr 29, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1765222
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1765229
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1782519
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1782955
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1810660
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1830856
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837946
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4483.json
• report
  https://access.redhat.com/security/cve/CVE-2019-15945
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15945
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15945
• report
  https://access.redhat.com/security/cve/CVE-2019-15946
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15946
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15946
• report
  https://access.redhat.com/security/cve/CVE-2019-19479
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19479
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19479
• report
  https://access.redhat.com/security/cve/CVE-2019-19481
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19481
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19481
• report
  https://access.redhat.com/security/cve/CVE-2019-20792
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-20792
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-20792