./security/opensc, Smart Card drivers and middleware

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 0.26.1nb3, Package name: opensc-0.26.1nb3, Maintainer: pkgsrc-users

OpenSC provides a set of libraries and utilities to access smart cards.
Its main focus is on cards that support cryptographic operations, and
facilitate their use in security applications such as mail encryption,
authentication, and digital signature. OpenSC implements the PKCS#11 API
so applications supporting this API such as Mozilla Firefox and Thunderbird
can use it. OpenSC implements the PKCS#15 standard and aims to be compatible
with every software that does so, too.


Required to run:
[textproc/libxslt] [security/openssl] [security/pcsc-lite]

Required to build:
[textproc/docbook-xsl] [pkgtools/cwrappers]

Package options: pcsc-lite

Master sites:

Filesize: 2360.288 KB

Version history: (Expand)

CVS history: (Expand)


   2026-01-07 09:49:50 by Thomas Klausner | Files touched by this commit (2525) 
Log message:
*: recursive bump for icu 78.1
   2025-10-23 22:40:24 by Thomas Klausner | Files touched by this commit (2999) 
Log message:
*: recursive bump for pcre2

Running an old binary against the new pcre doesn't work:
/usr/pkg/lib/libpcre2-8.so.0: version PCRE2_10.47 required by \ 
/usr/pkg/lib/libglib-2.0.so.0 not defined
   2025-05-06 14:07:36 by Thomas Klausner | Files touched by this commit (124) 
Log message:
*: SOEXT -> SHLIB_EXT
   2025-04-17 23:53:13 by Thomas Klausner | Files touched by this commit (2449) 
Log message:
*: recursive bump for icu 77 and libxml2 2.14
   2025-01-15 13:36:53 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
opensc: updated to 0.26.1

0.26.1

General improvements

Align allocations of sc_mem_secure_alloc
Fix -O3 gcc optimization failure on amd64 and ppc64el

pkcs11-spy

Avoid crash while spying C_GetInterface()

TCOS

Fix reading certificate
   2024-12-28 09:56:21 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
opensc: updated to 0.26.0

New in 0.26.0; 2024-11-13

Security
* CVE-2024-45615: Usage of uninitialized values in libopensc and pkcs15init
* CVE-2024-45616: Uninitialized values after incorrect check or usage of APDU \ 
response values in libopensc
* CVE-2024-45617: Uninitialized values after incorrect or missing checking \ 
return values of functions in libopensc
* CVE-2024-45618: Uninitialized values after incorrect or missing checking \ 
return values of functions in pkcs15init
* CVE-2024-45619: Incorrect handling length of buffers or files in libopensc
* CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init
* CVE-2024-8443: Heap buffer overflow in OpenPGP driver when generating key

General improvements
* Fix reselection of DF after error in PKCS#15 layer
* Unify OpenSSL logging throughout code
* Extend the p11test to support kryoptic
* Fix for error in PCSC reconnection
* Fixed various issues reported by OSS-Fuzz and Coverity in drivers, PKCS#11 and \ 
PKCS#15 layer

PKCS#15
* Documentation for PKCS#15 profile files

minidriver
* Support PinCacheAlwaysPrompt usable for PIV cards

pkcs11-tool
* Show URI when listing token information
* Do not limit size of objects to 5000 bytes
* Add support for AES CMAC
* Add support for AES GCM encryption
* Add support for RSA OAEP encryption
* Add support for HKDF
* Implement better support for wrapping and unwrapping
* Add support for EdDSA sign and verify

pkcs15-crypt
* Fix PKCS#1 encoding function to correctly detect padding type

piv-tool
* Fix RSA key generation
* Avoid possible state change when matching unknown card

sc-hsm-tool
* Cleanse buffer with plaintext key share

pkcs11-register
* Fix pkcs11-register defaults on macOS and Windows

IDPrime
* Fix identification of IDPrime 840 cards
* Fix container mapping for IDPrime 940 cards
* Reorder ATRs for matching cards

OpenPGP
* Fix state tracking after erasing card

Belpic
* Disable Applet V1.8

MICARDO
* Deactivate driver

SmartCard-HSM
* Fix signing with secp521r1 signature

eOI
* Set model via `sc_card_ctl` function

Rutoken
* increase the minimum PIN size to support Rutoken ECP BIO

JPKI
* Adjust parameters for public key in PKCS#15 emulator

D-Trust
* Add support for ECDSA signatures and ECDH key agreement for D-Trust Signatures \ 
Cards 4.1/4.4
   2024-11-14 23:22:33 by Thomas Klausner | Files touched by this commit (2428) 
Log message:
*: recursive bump for icu 76 shlib major version bump
   2024-11-01 13:55:19 by Thomas Klausner | Files touched by this commit (2425) 
Log message:
*: revbump for icu downgrade