Added missing CVEs to NEWS

fixes OpenSC#2841
frankmorgner · Sep 1, 2023 · e65d1e9 · e65d1e9
1 parent 772a0ac
commit e65d1e9
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/NEWS b/NEWS
@@ -1,5 +1,13 @@
 NEWS for OpenSC -- History of user visible changes
 
+# Addendum for 0.23.0; 2023-09-01
+* fixed security problems
+  * CVE-2021-42778 Heap double free in sc_pkcs15_free_tokeninfo
+  * CVE-2021-42779 Heap use after free in sc_file_valid
+  * CVE-2021-42780 Use after return in insert_pin function
+  * CVE-2021-42781 Heap buffer overflow in pkcs15-oberthur.c
+  * CVE-2021-42782 Stack buffer overflow issues in various places
+
 # New in 0.23.0; 2022-11-29
 ## General improvements
 * Support signing of data with a length of more than 512 bytes (#2314)