mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-18 05:13:43 -09:00
070a0f697c
Fixes the following security vulnerabilities:
0.25.0:
CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5
padding in OpenSC
https://github.com/OpenSC/OpenSC/wiki/CVE-2023-5992
CVE-2024-1454: Potential use-after-free in AuthentIC driver during card
enrollment in pkcs15init
https://github.com/OpenSC/OpenSC/wiki/CVE-2024-1454
0.26.0:
CVE-2024-45615: Usage of uninitialized values in libopensc and pkcs15init
https://github.com/advisories/GHSA-3q68-hm47-94vg
CVE-2024-45616: Uninitialized values after incorrect check or usage of APDU
response values in libopensc
https://github.com/advisories/GHSA-2mjg-798r-mxwh
CVE-2024-45617: Uninitialized values after incorrect or missing checking
return values of functions in libopensc
https://github.com/advisories/GHSA-cf2w-h975-2fpg
CVE-2024-45618: Uninitialized values after incorrect or missing checking
return values of functions in pkcs15init
https://github.com/advisories/GHSA-f2v6-mw6x-qmwc
CVE-2024-45619: Incorrect handling length of buffers or files in libopensc
https://github.com/advisories/GHSA-9vxw-3j77-cj78
CVE-2024-45620: Incorrect handling of the length of buffers or files in
pkcs15init
https://github.com/advisories/GHSA-9c2g-6v5v-57qg
CVE-2024-8443: Heap buffer overflow in OpenPGP driver when generating key
https://github.com/advisories/GHSA-mgc5-p43f-72pc
Release notes:
https://github.com/OpenSC/OpenSC/releases/tag/0.26.0
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1f4b4ccde7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
31 lines
815 B
Makefile
31 lines
815 B
Makefile
################################################################################
|
|
#
|
|
# opensc
|
|
#
|
|
################################################################################
|
|
|
|
OPENSC_VERSION = 0.26.0
|
|
OPENSC_SITE = https://github.com/OpenSC/OpenSC/releases/download/$(OPENSC_VERSION)
|
|
OPENSC_LICENSE = LGPL-2.1+
|
|
OPENSC_LICENSE_FILES = COPYING
|
|
OPENSC_CPE_ID_VALID = YES
|
|
OPENSC_DEPENDENCIES = pcsc-lite
|
|
OPENSC_INSTALL_STAGING = YES
|
|
OPENSC_CONF_OPTS = --disable-cmocka --disable-strict --disable-tests
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
|
OPENSC_DEPENDENCIES += openssl
|
|
OPENSC_CONF_OPTS += --enable-openssl
|
|
else
|
|
OPENSC_CONF_OPTS += --disable-openssl
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_ZLIB),y)
|
|
OPENSC_DEPENDENCIES += zlib
|
|
OPENSC_CONF_OPTS += --enable-zlib
|
|
else
|
|
OPENSC_CONF_OPTS += --disable-zlib
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|