Bug 25869 - pcsc-lite new security issue fixed upstream in 1.8.25
Summary: pcsc-lite new security issue fixed upstream in 1.8.25
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2019-12-13 19:34 CET by David Walser
Modified: 2020-01-12 00:53 CET (History)
4 users (show)

See Also:
Source RPM: pcsc-lite-1.8.24-2.mga7.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2019-12-13 19:34:24 CET 
Fedora has issued an advisory on April 9:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/XCYQSR63MB5YBVLCB3EQEGARQSU3RV7G/

Mageia 7 is also affected.
David Walser 2019-12-13 19:34:33 CET

Whiteboard: (none) => MGA7TOO

Comment 1 Sander Lepik 2020-01-08 19:15:29 CET 
I've updated Cauldron and MGA7 to 1.8.26.

Whiteboard: MGA7TOO => (none)
Version: Cauldron => 7

Comment 2 David Walser 2020-01-08 20:52:57 CET 
Advisory:
----------------------------------------

The pcsc-lite package has been updated to version 1.8.26, which fixes a memory
leak and other bugs.  See the ChangeLog for details.

References:
https://salsa.debian.org/rousseau/PCSC/blob/master/ChangeLog
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/XCYQSR63MB5YBVLCB3EQEGARQSU3RV7G/
----------------------------------------

Updated packages in core/updates_testing:
----------------------------------------
pcsc-lite-1.8.26-1.mga7
libpcsclite1-1.8.26-1.mga7
pcsc-spy-1.8.26-1.mga7
libpcscspy0-1.8.26-1.mga7
libpcsclite-devel-1.8.26-1.mga7
pcsc-lite-doc-1.8.26-1.mga7

from pcsc-lite-1.8.26-1.mga7.src.rpm

Assignee: mageia => qa-bugs
CC: (none) => mageia

Comment 3 Herman Viaene 2020-01-10 13:09:54 CET 
MGA7-64 Plasma on Lenovo B50
No installation issues.
This is an upgrade on a previous installation.
Stopped pcscd, installed updates, started pcscd again, read my Belgian eid card wwith the eidenv command: all OK

Whiteboard: (none) => MGA7-64-OK
CC: (none) => herman.viaene

Thomas Backlund 2020-01-11 23:24:04 CET

Keywords: (none) => advisory, validated_update
CC: (none) => tmb, sysadmin-bugs

Comment 4 Mageia Robot 2020-01-12 00:53:35 CET 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2020-0031.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.