From: Wang Mingyu <wan...@fujitsu.com> Changelog: ============ ## Security * [CVE-2023-5992]: Side-channel leaks while stripping encryption PKCS#1.5 padding in OpenSC * [CVE-2024-1454]: Potential use-after-free in AuthentIC driver during card enrollment in pkcs15init
## General improvements * Update OpenSSL 1.1.1 to 3.0 in MacOS build * Remove support for old card drivers Akis, GPK, Incrypto34 and Westcos, disable Cyberflex driver * Fix 64b to 32b conversions * Improvements for the p11test * Fix reader initialization without SCardControl * Make RSA PKCS#1 v1.5 depadding constant-time * Add option for disabling PKCS#1 v1.5 depadding (type 01 and 02) on the card * Enable MSI signing via Signpath CI integration for Windows * Fixed various issues reported by OSS-Fuzz and Coverity in drivers Signed-off-by: Wang Mingyu <wan...@fujitsu.com> --- .../opensc/{opensc_0.24.0.bb => opensc_0.25.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/opensc/{opensc_0.24.0.bb => opensc_0.25.0.bb} (96%) diff --git a/meta-oe/recipes-support/opensc/opensc_0.24.0.bb b/meta-oe/recipes-support/opensc/opensc_0.25.0.bb similarity index 96% rename from meta-oe/recipes-support/opensc/opensc_0.24.0.bb rename to meta-oe/recipes-support/opensc/opensc_0.25.0.bb index fd64cf9e8..02c9c7e80 100644 --- a/meta-oe/recipes-support/opensc/opensc_0.24.0.bb +++ b/meta-oe/recipes-support/opensc/opensc_0.25.0.bb @@ -12,7 +12,7 @@ LICENSE = "LGPL-2.0-or-later" LIC_FILES_CHKSUM = "file://COPYING;md5=cb8aedd3bced19bd8026d96a8b6876d7" #v0.21.0 -SRCREV = "f15d0c5295f3247ae56bf976cf411fec4b47b6ec" +SRCREV = "67986eda93a3a359a897f0b0be97f4315dde8d42" SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https \ " DEPENDS = "virtual/libiconv openssl" -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#109432): https://lists.openembedded.org/g/openembedded-devel/message/109432 Mute This Topic: https://lists.openembedded.org/mt/105019299/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-