[Secure-testing-team] Bug#856501: libcacard: CVE-2017-6414: host memory leakage while creating new APDU

[Salvatore Bonaccorso]

Source: libcacard
Version: 1:2.5.0-2
Severity: important
Tags: patch upstream security

Hi,

the following vulnerability was published for libcacard.

CVE-2017-6414[0]:
libcacard: host memory leakage while creating new APDU

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-6414
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6414
[1] https://cgit.freedesktop.org/spice/libcacard/commit/?id=9113dc6a303604a2d9812ac70c17d076ef11886c

I think it would be good to have this fix included for stretch, to not
have stretch released with this CVE open for libcacard.

Regards,
Salvatore