mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-01 06:21:56 -09:00
package/opensc: security bump version to 0.27.1
https://github.com/OpenSC/OpenSC/blob/0.27.1/NEWS Switched to sha256 tarball hash provided by upstream. Removed patch which is included in this release. Fixes the following CVEs: * CVE-2025-13763: Several uses of potentially uninitialized memory detected by fuzzers * CVE-2025-49010: Possible write beyond buffer bounds during processing of GET RESPONSE APDU * CVE-2025-66215: Possible write beyond buffer bounds in oberthur driver * CVE-2025-66038: Possible read beyond buffer bounds when parsing historical bytes in PIV driver * CVE-2025-66037: Possible buffer overrun while parsing SPKI Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
This commit is contained in:
committed by
Marcus Hoffmann
parent
bd9e30470f
commit
baa0a13653
@@ -1,41 +0,0 @@
|
|||||||
From 768c9bfcd91206f0d85cd4757fde48e00850a014 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
|
|
||||||
Date: Mon, 6 Jan 2025 22:36:10 +0100
|
|
||||||
Subject: [PATCH] pkcs11-tool: disable wrap/unwrap test until OpenSC#1796 is
|
|
||||||
resolved
|
|
||||||
|
|
||||||
Similar to ab74fae4d71d1705b77b9459141987a95dcfc91e ("pkcs11-tool:
|
|
||||||
disable wrap/unwrap test until OpenSC#1796 is resolved"), but for
|
|
||||||
0.26, since OpenSC#1796 is still open.
|
|
||||||
|
|
||||||
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
|
|
||||||
Upstream: https://github.com/OpenSC/OpenSC/pull/3303
|
|
||||||
---
|
|
||||||
src/tools/pkcs11-tool.c | 4 ++--
|
|
||||||
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/src/tools/pkcs11-tool.c b/src/tools/pkcs11-tool.c
|
|
||||||
index d701d76d6..871a39977 100644
|
|
||||||
--- a/src/tools/pkcs11-tool.c
|
|
||||||
+++ b/src/tools/pkcs11-tool.c
|
|
||||||
@@ -7681,7 +7681,7 @@ static int test_verify(CK_SESSION_HANDLE sess)
|
|
||||||
return errors;
|
|
||||||
}
|
|
||||||
|
|
||||||
-#if OPENSC_VERSION_MAJOR == 0 && OPENSC_VERSION_MINOR <= 25
|
|
||||||
+#if OPENSC_VERSION_MAJOR == 0 && OPENSC_VERSION_MINOR <= 26
|
|
||||||
#else
|
|
||||||
#ifdef ENABLE_OPENSSL
|
|
||||||
static int wrap_unwrap(CK_SESSION_HANDLE session,
|
|
||||||
@@ -7805,7 +7805,7 @@ static int wrap_unwrap(CK_SESSION_HANDLE session,
|
|
||||||
*/
|
|
||||||
static int test_unwrap(CK_SESSION_HANDLE sess)
|
|
||||||
{
|
|
||||||
-#if OPENSC_VERSION_MAJOR == 0 && OPENSC_VERSION_MINOR <= 25
|
|
||||||
+#if OPENSC_VERSION_MAJOR == 0 && OPENSC_VERSION_MINOR <= 26
|
|
||||||
/* temporarily disable test, see https://github.com/OpenSC/OpenSC/issues/1796 */
|
|
||||||
return 0;
|
|
||||||
#else
|
|
||||||
--
|
|
||||||
2.47.1
|
|
||||||
|
|
||||||
@@ -1,5 +1,5 @@
|
|||||||
# Computed locally from https://https://github.com/OpenSC/OpenSC/releases/
|
# From https://github.com/OpenSC/OpenSC/releases/tag/0.27.1
|
||||||
sha256 837baead45e1505260d868871056150ede6e73d35460a470f2595a9e5e75f82b opensc-0.26.0.tar.gz
|
sha256 976f4a23eaf3397a1a2c3a7aac80bf971a8c3d829c9a79f06145bfaeeae5eca7 opensc-0.27.1.tar.gz
|
||||||
|
|
||||||
# Computed locally
|
# Computed locally
|
||||||
sha256 376b54d4c5f4aa99421823fa4da93e3ab73096fce2400e89858632aa7da24a14 COPYING
|
sha256 376b54d4c5f4aa99421823fa4da93e3ab73096fce2400e89858632aa7da24a14 COPYING
|
||||||
|
|||||||
@@ -4,7 +4,7 @@
|
|||||||
#
|
#
|
||||||
################################################################################
|
################################################################################
|
||||||
|
|
||||||
OPENSC_VERSION = 0.26.0
|
OPENSC_VERSION = 0.27.1
|
||||||
OPENSC_SITE = https://github.com/OpenSC/OpenSC/releases/download/$(OPENSC_VERSION)
|
OPENSC_SITE = https://github.com/OpenSC/OpenSC/releases/download/$(OPENSC_VERSION)
|
||||||
OPENSC_LICENSE = LGPL-2.1+
|
OPENSC_LICENSE = LGPL-2.1+
|
||||||
OPENSC_LICENSE_FILES = COPYING
|
OPENSC_LICENSE_FILES = COPYING
|
||||||
|
|||||||
Reference in New Issue
Block a user