2024-12-12 21:07:30 +00:00

109 lines
3.8 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20192546",
"Version": "oval:org.altlinux.errata:def:20192546",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2019-2546: package `opensc` update to version 0.19.0-alt4",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f1"
],
"Products": [
"ALT SP Workstation",
"ALT SP Server"
]
}
],
"References": [
{
"RefID": "ALT-PU-2019-2546",
"RefURL": "https://errata.altlinux.org/ALT-PU-2019-2546",
"Source": "ALTPU"
},
{
"RefID": "BDU:2022-00273",
"RefURL": "https://bdu.fstec.ru/vul/2022-00273",
"Source": "BDU"
},
{
"RefID": "CVE-2019-6502",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2019-6502",
"Source": "CVE"
}
],
"Description": "This update upgrades opensc to version 0.19.0-alt4. \nSecurity Fix(es):\n\n * BDU:2022-00273: Уязвимость набора программных инструментов и библиотек для работы со смарт-картами OpenSC, связанная с неправильным освобождением памяти перед удалением последний ссылки, позволяющая нарушителю вызвать отказ в обслуживании\n\n * CVE-2019-6502: sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2019-08-27"
},
"Updated": {
"Date": "2019-08-27"
},
"BDUs": [
{
"ID": "BDU:2022-00273",
"CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-401",
"Href": "https://bdu.fstec.ru/vul/2022-00273",
"Impact": "High",
"Public": "20190122"
}
],
"CVEs": [
{
"ID": "CVE-2019-6502",
"CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-401",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2019-6502",
"Impact": "High",
"Public": "20190122"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:5001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20192546001",
"Comment": "libopensc is earlier than 0:0.19.0-alt4"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20192546002",
"Comment": "libopensc-devel is earlier than 0:0.19.0-alt4"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20192546003",
"Comment": "opensc is earlier than 0:0.19.0-alt4"
}
]
}
]
}
}
]
}