Processed: bookworm-pu: package opensc/0.23.0-0.3+deb12u2

[Debian Bug Tracking System]

affects -1 + src:opensc

Bug #1091207 [release.debian.org] bookworm-pu: package opensc/0.23.0-0.3+deb12u2
Added indication that 1091207 affects src:opensc

[Debian Bug Tracking System]

tags -1 + confirmed

Bug #1091207 [release.debian.org] bookworm-pu: package opensc/0.23.0-0.3+deb12u2
Added tag(s) confirmed.

[Adam D. Barratt]

Control: tags -1 + confirmed

Fix 9 no-dsa vulnerabilities (CVE-2023-5992, CVE-2024-1454, -8443 and
-45615 to -45620).

Please go ahead.

Regards,

Adam

[Jonathan Wiltshire]

package release.debian.org
tags 1091207 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==============

Package: opensc
Version: 0.23.0-0.3+deb12u2

Explanation: fix data leak issue [CVE-2023-5992]; fix use-after-free issue [CVE-2024-1454]; fix missing initialisation issue [CVE-2024-45615]; fix various issues with APDU buffer handling [CVE-2024-45616]; fix missing or incorrect function return value checks [CVE-2024-45617 CVE-2024-45618]; fix "incorrect handling of length of buffers or files" issues [CVE-2024-45619 CVE-2024-45620]; fix arbitary code execution issue [CVE-2024-8443]

[Debian Bug Tracking System]

Your message dated Sat, 11 Jan 2025 11:03:09 +0000
with message-id <E1tWZGn-009ja1-***@coccia.debian.org>
and subject line Close 1091207
has caused the Debian Bug report #1091207,
regarding bookworm-pu: package opensc/0.23.0-0.3+deb12u2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ***@bugs.debian.org
immediately.)