Bug 25869

Summary:	pcsc-lite new security issue fixed upstream in 1.8.25
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal	CC:	herman.viaene, mageia, sysadmin-bugs, tmb
Version:	7	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA7-64-OK
Source RPM:	pcsc-lite-1.8.24-2.mga7.src.rpm	CVE:
Status comment:

Description David Walser 2019-12-13 19:34:24 CET

Fedora has issued an advisory on April 9:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/XCYQSR63MB5YBVLCB3EQEGARQSU3RV7G/

Mageia 7 is also affected.

David Walser 2019-12-13 19:34:33 CET

Whiteboard: (none) => MGA7TOO

Comment 1 Sander Lepik 2020-01-08 19:15:29 CET

I've updated Cauldron and MGA7 to 1.8.26.

Whiteboard: MGA7TOO => (none)
Version: Cauldron => 7

Comment 2 David Walser 2020-01-08 20:52:57 CET

Advisory:
----------------------------------------

The pcsc-lite package has been updated to version 1.8.26, which fixes a memory
leak and other bugs.  See the ChangeLog for details.

References:
https://salsa.debian.org/rousseau/PCSC/blob/master/ChangeLog
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/XCYQSR63MB5YBVLCB3EQEGARQSU3RV7G/
----------------------------------------

Updated packages in core/updates_testing:
----------------------------------------
pcsc-lite-1.8.26-1.mga7
libpcsclite1-1.8.26-1.mga7
pcsc-spy-1.8.26-1.mga7
libpcscspy0-1.8.26-1.mga7
libpcsclite-devel-1.8.26-1.mga7
pcsc-lite-doc-1.8.26-1.mga7

from pcsc-lite-1.8.26-1.mga7.src.rpm

Assignee: mageia => qa-bugs
CC: (none) => mageia

Comment 3 Herman Viaene 2020-01-10 13:09:54 CET

MGA7-64 Plasma on Lenovo B50
No installation issues.
This is an upgrade on a previous installation.
Stopped pcscd, installed updates, started pcscd again, read my Belgian eid card wwith the eidenv command: all OK

Whiteboard: (none) => MGA7-64-OK
CC: (none) => herman.viaene

Thomas Backlund 2020-01-11 23:24:04 CET

Keywords: (none) => advisory, validated_update
CC: (none) => tmb, sysadmin-bugs

Comment 4 Mageia Robot 2020-01-12 00:53:35 CET

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2020-0031.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED