[Git][security-tracker-team/security-tracker][master] Reference upstream fix for CVE-2019-6502

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4b00dd07 by Salvatore Bonaccorso at 2020-01-04T09:01:41+01:00
Reference upstream fix for CVE-2019-6502

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -50572,6 +50572,7 @@ CVE-2019-6503 (There is a deserialization vulnerability in Chatopera cosin v3.10
 CVE-2019-6502 (sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory  ...)
 	- opensc 0.20.0-1 (unimportant)
 	NOTE: https://github.com/OpenSC/OpenSC/issues/1586
+	NOTE: https://github.com/OpenSC/OpenSC/commit/0d7967549751b7032f22b437106b41444aff0ba9 (0.20.0-rc1)
 	NOTE: Negligible security impact, assigning a CVE seems out of proportion...
 CVE-2019-1003004 (An improper authorization vulnerability exists in Jenkins 2.158 and ea ...)
 	NOT-FOR-US: Jenkins



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4b00dd07d36dbd6aaad6b7441e4181a58d19a9af

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4b00dd07d36dbd6aaad6b7441e4181a58d19a9af
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200104/0c6fc573/attachment.html>