File _patchinfo of Package patchinfo.12915

<patchinfo incident="12915">
  <issue tracker="bnc" id="1153165">VUL-0: CVE-2019-14853: python-ecdsa: unexpected exceptions during signature decoding</issue>
  <issue tracker="bnc" id="1154217">VUL-0: CVE-2019-14859: python-ecdsa,python27-ecdsa: DER encoding is not being verified in signatures</issue>
  <issue tracker="cve" id="2019-14859"/>
  <issue tracker="cve" id="2019-14853"/>
  <packager>rjschwei</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for python-ecdsa</summary>
  <description>This update for python-ecdsa to version 0.13.3 fixes the following issues:

Security issues fixed:

- CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165).
- CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding (bsc#1154217).
</description>
</patchinfo>
openSUSE Build Service is sponsored by