CVS commit: pkgsrc/security/opensc

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sat Dec 28 08:56:21 UTC 2024

Modified Files:
        pkgsrc/security/opensc: Makefile distinfo

Log Message:
opensc: updated to 0.26.0

New in 0.26.0; 2024-11-13

Security
* CVE-2024-45615: Usage of uninitialized values in libopensc and pkcs15init
* CVE-2024-45616: Uninitialized values after incorrect check or usage of APDU response values in libopensc
* CVE-2024-45617: Uninitialized values after incorrect or missing checking return values of functions in libopensc
* CVE-2024-45618: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init
* CVE-2024-45619: Incorrect handling length of buffers or files in libopensc
* CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init
* CVE-2024-8443: Heap buffer overflow in OpenPGP driver when generating key

General improvements
* Fix reselection of DF after error in PKCS#15 layer
* Unify OpenSSL logging throughout code
* Extend the p11test to support kryoptic
* Fix for error in PCSC reconnection
* Fixed various issues reported by OSS-Fuzz and Coverity in drivers, PKCS#11 and PKCS#15 layer

PKCS#15
* Documentation for PKCS#15 profile files

minidriver
* Support PinCacheAlwaysPrompt usable for PIV cards

pkcs11-tool
* Show URI when listing token information
* Do not limit size of objects to 5000 bytes
* Add support for AES CMAC
* Add support for AES GCM encryption
* Add support for RSA OAEP encryption
* Add support for HKDF
* Implement better support for wrapping and unwrapping
* Add support for EdDSA sign and verify

pkcs15-crypt
* Fix PKCS#1 encoding function to correctly detect padding type

piv-tool
* Fix RSA key generation
* Avoid possible state change when matching unknown card

sc-hsm-tool
* Cleanse buffer with plaintext key share

pkcs11-register
* Fix pkcs11-register defaults on macOS and Windows

IDPrime
* Fix identification of IDPrime 840 cards
* Fix container mapping for IDPrime 940 cards
* Reorder ATRs for matching cards

OpenPGP
* Fix state tracking after erasing card

Belpic
* Disable Applet V1.8

MICARDO
* Deactivate driver

SmartCard-HSM
* Fix signing with secp521r1 signature

eOI
* Set model via `sc_card_ctl` function

Rutoken
* increase the minimum PIN size to support Rutoken ECP BIO

JPKI
* Adjust parameters for public key in PKCS#15 emulator

D-Trust
* Add support for ECDSA signatures and ECDH key agreement for D-Trust Signatures Cards 4.1/4.4


To generate a diff of this commit:
cvs rdiff -u -r1.50 -r1.51 pkgsrc/security/opensc/Makefile
cvs rdiff -u -r1.24 -r1.25 pkgsrc/security/opensc/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/opensc/Makefile
diff -u pkgsrc/security/opensc/Makefile:1.50 pkgsrc/security/opensc/Makefile:1.51
--- pkgsrc/security/opensc/Makefile:1.50        Thu Nov 14 22:21:32 2024
+++ pkgsrc/security/opensc/Makefile     Sat Dec 28 08:56:21 2024
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.50 2024/11/14 22:21:32 wiz Exp $
+# $NetBSD: Makefile,v 1.51 2024/12/28 08:56:21 adam Exp $
 
-DISTNAME=      opensc-0.25.1
-PKGREVISION=   4
+DISTNAME=      opensc-0.26.0
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=OpenSC/}
 

Index: pkgsrc/security/opensc/distinfo
diff -u pkgsrc/security/opensc/distinfo:1.24 pkgsrc/security/opensc/distinfo:1.25
--- pkgsrc/security/opensc/distinfo:1.24        Fri Apr  5 13:46:22 2024
+++ pkgsrc/security/opensc/distinfo     Sat Dec 28 08:56:21 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.24 2024/04/05 13:46:22 adam Exp $
+$NetBSD: distinfo,v 1.25 2024/12/28 08:56:21 adam Exp $
 
-BLAKE2s (opensc-0.25.1.tar.gz) = 153b35c39d6d5e2f648f129cd5db0bfc8dbc0dc2dd1a61d9d6ba8d8279e602bc
-SHA512 (opensc-0.25.1.tar.gz) = 23fa35e4aac5749f20abc847bb3e0c9b822276856f451a46dda8226575b9de0b92856a91c442d720c04a5e445d55317c9cd4c8c5c30a550b731bf206443990cf
-Size (opensc-0.25.1.tar.gz) = 2005026 bytes
+BLAKE2s (opensc-0.26.0.tar.gz) = 8ef8708758b8e2b99d7531ec31b53465c0979dee1572af6686079e71150a7168
+SHA512 (opensc-0.26.0.tar.gz) = 2bc12790c7c267af1e06c11517626672542b61b9d3725a4848e3875342abe84ac81fbb589cca1470b7d6a46230ba8f97a243deb63e7459591d07ef4fa94ebfd8
+Size (opensc-0.26.0.tar.gz) = 2024186 bytes
 SHA1 (patch-configure.ac) = 37fbb6eab0eb19299ce1feefd08c18a73f688150
 SHA1 (patch-doc_tools_Makefile.am) = bc70d3371cde940f2352e1d9a9e8c3c2c49658ed
 SHA1 (patch-etc_Makefile.am) = 5ca9245c763a9f8a8aa273e7e76c75168c52d0cd