CVS commit: pkgsrc/security/opensc

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Apr 24 10:02:52 UTC 2026

Modified Files:
        pkgsrc/security/opensc: Makefile distinfo

Log Message:
opensc: updated to 0.27.1

New in 0.27.1; 2026-03-31

* Bugfix release to fix up infrastructure issues.

New in 0.27.0; 2026-03-30

Security
* CVE-2025-13763: Several uses of potentially uninitialized memory detected by fuzzers
* CVE-2025-49010: Possible write beyond buffer bounds during processing of GET RESPONSE APDU
* CVE-2025-66215: Possible write beyond buffer bounds in oberthur driver
* CVE-2025-66038: Possible read beyond buffer bounds when parsing historical bytes in PIV driver
* CVE-2025-66037: Possible buffer overrun while parsing SPKI
* More low-severity data handling issues when parsing profile configuration

General improvements
* Added support for PKCS#11 3.2 in tools and pkcs11-spy and p11test
* Added support for Ed448, X448 mechanisms and improve support for
  Edwards and montgomery keys in general
* Support CKA_PUBKEY_KEY_INFO PKCS#11 attribute
* Various refactoring of autotools build system
* Remove obsolete tokend support
* Run tests against different software PKCS#11 tokens kryoptic and NSS softokn
* Removed internal caching for current EF/DF
* Correctly detect OS-level FIPS mode in OpenSSL automatically
  or through custom configuration file
* Added support for Brainpool twisted curves to pkcs11-tool and SC-HSM

PC/SC
* Handle case when smart card is removed and inserted between two subsequent calls to
  `refresh_attributes()`

EsteID
* Add support for EstEID 2025
* Implement FinEID 4.0/4.1 support
* Add Latvian IDEMIA Cosmo X card support
* Check if PIN is locked and hint CKF_USER_PIN_TO_BE_CHANGED
* Remove obsolete FinEID cards
* Add Latvian Cosmo 8.2 card support

D-Trust
* Prevent unncecessary pin prompts on pinpad readers
* Support for D-Trust Card 5.1 & 5.4
* Implement PIN change and unblock in dtrust-tool

Belpic
* Add supports for belpic applet version 1.8

OpenPGP
* Implement key derived PIN format (KDF-DO) as per OpenPGP card spec v3.3

IDPrime
* Implement 5110+ FIPS and 5110 CC (940) derive support

Windows
* Update to Wix 6
* Fix C_WaitForSlotEvent() not working in Windows
* remove pkcs11-register from autostart

MacOS
* Installer images are now notarized

pkcs11-tool
* Added support for ML-DSA, ML-KEM, SLH-DSA keys from PKCS#11 3.2
* Improve support for Edwards and montgomery keys and
  add derive key support for CKK_MONTGOMERY
* Add support for ChaCha20 and Poly1305
* Add support for AES CTR in decrypt_data() and encrypt_data()
* Add initial support for PKCS#11 URIs
* Print more information about RSA keys


To generate a diff of this commit:
cvs rdiff -u -r1.56 -r1.57 pkgsrc/security/opensc/Makefile
cvs rdiff -u -r1.26 -r1.27 pkgsrc/security/opensc/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/opensc/Makefile
diff -u pkgsrc/security/opensc/Makefile:1.56 pkgsrc/security/opensc/Makefile:1.57
--- pkgsrc/security/opensc/Makefile:1.56        Tue Feb  3 08:41:03 2026
+++ pkgsrc/security/opensc/Makefile     Fri Apr 24 10:02:52 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.56 2026/02/03 08:41:03 wiz Exp $
+# $NetBSD: Makefile,v 1.57 2026/04/24 10:02:52 adam Exp $
 
-DISTNAME=      opensc-0.26.1
-PKGREVISION=   3
+DISTNAME=      opensc-0.27.1
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=OpenSC/}
 GITHUB_PROJECT=        OpenSC

Index: pkgsrc/security/opensc/distinfo
diff -u pkgsrc/security/opensc/distinfo:1.26 pkgsrc/security/opensc/distinfo:1.27
--- pkgsrc/security/opensc/distinfo:1.26        Wed Jan 15 12:36:53 2025
+++ pkgsrc/security/opensc/distinfo     Fri Apr 24 10:02:52 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.26 2025/01/15 12:36:53 adam Exp $
+$NetBSD: distinfo,v 1.27 2026/04/24 10:02:52 adam Exp $
 
-BLAKE2s (opensc-0.26.1.tar.gz) = 38c34824577b19563b737de760d70cc2d78a1329a22618eb64301edc87092e61
-SHA512 (opensc-0.26.1.tar.gz) = 8555173b3727aede568290a3b288a46e74564050574b9a1e85487adc59532cb600e1f67c289b7430c8daca348fe928eb1e6e837e72c32731649403b19d53cfd8
-Size (opensc-0.26.1.tar.gz) = 2416935 bytes
+BLAKE2s (opensc-0.27.1.tar.gz) = 2484da7efb46569ee3c311f861de19418e6ca17973e38bdaecab62283a910177
+SHA512 (opensc-0.27.1.tar.gz) = 1d435938d5db45ffc60e2ac2512c42bc7ee893991d213b19033a60cabca19a7ddd5bf1f71bb172dcb77220bfa87abe92564b3edc878f22a87dfd4e7bcacf662f
+Size (opensc-0.27.1.tar.gz) = 2470990 bytes
 SHA1 (patch-configure.ac) = 37fbb6eab0eb19299ce1feefd08c18a73f688150
 SHA1 (patch-doc_tools_Makefile.am) = bc70d3371cde940f2352e1d9a9e8c3c2c49658ed
 SHA1 (patch-etc_Makefile.am) = 5ca9245c763a9f8a8aa273e7e76c75168c52d0cd