https://github.com/OpenSC/OpenSC/releases/tag/0.24.0
Security
CVE-2023-40660: Fix Potential PIN bypass (#2806, frankmorgner/OpenSCToken#50, #2807)
CVE-2023-40661: Important dynamic analyzers reports
CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys (f1993dc)
General improvements
Fix compatibility of EAC with OpenSSL 3.0 (#2674)
Enable use_file_cache by default (#2501)
Use custom libctx with OpenSSL >= 3.0 (#2712, #2715)
Fix record-based files (#2604)
Fix several race conditions (#2735)
Run tests under Valgrind (#2756)
Test signing of data bigger than 512 bytes (#2789)
Update to OpenPACE 1.1.3 (#2796)
Implement logout for some of the card drivers (#2807)
Fix wrong popup position of opensc-notify (#2901)
Fixed various issues reported by OSS-Fuzz and Coverity regarding card drivers, PKCS#11 and PKCS#15 init
Upstream also dropped the onepin module.
Regular .so loaded in iridium and handled via qdigidoc4 keeps working.
I bumped automake to 1.16 since comments in the tarball already mention
that version, i.e. no reason to stick to older 1.15.
Feedback? OK?
Index: Makefile
===================================================================
RCS file: /cvs/ports/security/opensc/Makefile,v
diff -u -p -r1.67 Makefile
--- Makefile 27 Sep 2023 16:34:34 -0000 1.67
+++ Makefile 18 Dec 2023 21:50:14 -0000
@@ -1,10 +1,9 @@
COMMENT= set of libraries and utilities to access smart cards
-V= 0.23.0
+V= 0.24.0
DISTNAME= opensc-${V}
-REVISION= 0
-SHARED_LIBS += opensc 8.0 # 9.0
+SHARED_LIBS += opensc 8.1 # 10.1
SHARED_LIBS += smm-local 3.1
CATEGORIES= security
@@ -14,7 +13,8 @@ HOMEPAGE= https://github.com/OpenSC/Open
# LGPLv2.1+
PERMIT_PACKAGE= Yes
-WANTLIB= c crypto curses gio-2.0 gobject-2.0 iconv pthread readline z
+WANTLIB += c crypto curses gio-2.0 gobject-2.0 iconv intl pthread
+WANTLIB += readline z
SITES= https://github.com/OpenSC/OpenSC/releases/download/${V}/
@@ -48,7 +48,7 @@ FAKE_FLAGS= mandir="${PREFIX}/man/" \
sysconfdir="${PREFIX}/share/examples/opensc/"
AUTOCONF_VERSION = 2.69
-AUTOMAKE_VERSION = 1.15
+AUTOMAKE_VERSION = 1.16
# Allow building with base-gcc
CFLAGS += -Wno-error
Index: distinfo
===================================================================
RCS file: /cvs/ports/security/opensc/distinfo,v
diff -u -p -r1.18 distinfo
--- distinfo 28 Jun 2023 22:21:26 -0000 1.18
+++ distinfo 18 Dec 2023 20:51:52 -0000
@@ -1,2 +1,2 @@
-SHA256 (opensc-0.23.0.tar.gz) = pIRKbqA6Ui7PNeSWWXFtrLa+A/fAEKGlg6rz65Fe0uA=
-SIZE (opensc-0.23.0.tar.gz) = 2366469
+SHA256 (opensc-0.24.0.tar.gz) = JNA8aShykdoyowxMOKMErYJ/VsuF2DYZ4fVAOrZIDvg=
+SIZE (opensc-0.24.0.tar.gz) = 2440952
Index: patches/patch-configure_ac
===================================================================
RCS file: /cvs/ports/security/opensc/patches/patch-configure_ac,v
diff -u -p -r1.15 patch-configure_ac
--- patches/patch-configure_ac 28 Jun 2023 22:21:26 -0000 1.15
+++ patches/patch-configure_ac 18 Dec 2023 20:56:43 -0000
@@ -1,7 +1,7 @@
Index: configure.ac
--- configure.ac.orig
+++ configure.ac
-@@ -427,7 +427,7 @@ AC_FUNC_STAT
+@@ -444,7 +444,7 @@ AC_FUNC_STAT
AC_FUNC_VPRINTF
AC_CHECK_FUNCS([ \
getpass gettimeofday getline memset mkdir \
Index: patches/patch-src_libopensc_card-iasecc_c
===================================================================
RCS file: patches/patch-src_libopensc_card-iasecc_c
diff -N patches/patch-src_libopensc_card-iasecc_c
--- patches/patch-src_libopensc_card-iasecc_c 1 Jul 2023 10:26:43 -0000 1.2
+++ /dev/null 1 Jan 1970 00:00:00 -0000
@@ -1,18 +0,0 @@
-merged da01e5fab9be9865db1aac203e574e0edbfd6584
-"fixed compatibility with LibreSSL >= 3.5.0"
-fixes https://github.com/OpenSC/OpenSC/issues/2664
-
-Index: src/libopensc/card-iasecc.c
---- src/libopensc/card-iasecc.c.orig
-+++ src/libopensc/card-iasecc.c
-@@ -45,10 +45,6 @@
- * LibreSSL
- */
-
--#if defined(LIBRESSL_VERSION_NUMBER)
--# define EVP_MD_CTX_md_data(x) (x->md_data)
--
No comments:
Post a Comment