diff mbox series

[meta-oe,15/50] opensc: upgrade 0.24.0 -> 0.25.0

Message ID 1710827139-30056-15-git-send-email-wangmy@fujitsu.com
State Accepted
Headers show
Series [meta-oe,01/50] boost-sml: upgrade 1.1.9 -> 1.1.11 | expand

Commit Message

Mingyu Wang (Fujitsu) March 19, 2024, 5:45 a.m. UTC
From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
============
## Security
* [CVE-2023-5992]: Side-channel leaks while stripping encryption PKCS#1.5 padding in OpenSC
* [CVE-2024-1454]: Potential use-after-free in AuthentIC driver during card enrollment in pkcs15init

## General improvements
* Update OpenSSL 1.1.1 to 3.0 in MacOS build
* Remove support for old card drivers Akis, GPK, Incrypto34 and Westcos, disable Cyberflex driver
* Fix 64b to 32b conversions
* Improvements for the p11test
* Fix reader initialization without SCardControl
* Make RSA PKCS#1 v1.5 depadding constant-time
* Add option for disabling PKCS#1 v1.5 depadding (type 01 and 02) on the card
* Enable MSI signing via Signpath CI integration for Windows
* Fixed various issues reported by OSS-Fuzz and Coverity in drivers

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../opensc/{opensc_0.24.0.bb => opensc_0.25.0.bb}               | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-support/opensc/{opensc_0.24.0.bb => opensc_0.25.0.bb} (96%)
diff mbox series

Patch

diff --git a/meta-oe/recipes-support/opensc/opensc_0.24.0.bb b/meta-oe/recipes-support/opensc/opensc_0.25.0.bb
similarity index 96%
rename from meta-oe/recipes-support/opensc/opensc_0.24.0.bb
rename to meta-oe/recipes-support/opensc/opensc_0.25.0.bb
index fd64cf9e8..02c9c7e80 100644
--- a/meta-oe/recipes-support/opensc/opensc_0.24.0.bb
+++ b/meta-oe/recipes-support/opensc/opensc_0.25.0.bb
@@ -12,7 +12,7 @@  LICENSE = "LGPL-2.0-or-later"
 LIC_FILES_CHKSUM = "file://COPYING;md5=cb8aedd3bced19bd8026d96a8b6876d7"
 
 #v0.21.0
-SRCREV = "f15d0c5295f3247ae56bf976cf411fec4b47b6ec"
+SRCREV = "67986eda93a3a359a897f0b0be97f4315dde8d42"
 SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https \
           "
 DEPENDS = "virtual/libiconv openssl"