Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package opensc for openSUSE:Factory checked in at 2024-03-11 15:34:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/opensc (Old) and /work/SRC/openSUSE:Factory/.opensc.new.1770 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "opensc" Mon Mar 11 15:34:52 2024 rev:57 rq:1156889 version:0.25.0 Changes: -------- --- /work/SRC/openSUSE:Factory/opensc/opensc.changes 2024-02-29 21:50:41.138718115 +0100 +++ /work/SRC/openSUSE:Factory/.opensc.new.1770/opensc.changes 2024-03-11 15:42:31.209396259 +0100 @@ -1,0 +2,26 @@ +Sat Mar 9 12:06:03 UTC 2024 - Martin Hauke <mar...@gmx.de> + +- Update to version 0.25.0 + Security + * CVE-2023-5992: Fix Side-channel leaks while stripping + encryption PKCS#1.5 padding in OpenSC. + * CVE-2024-1454: Fix Potential use-after-free in AuthentIC driver + during card enrollment in pkcs15init. + General improvements + * Remove support for old card drivers Akis, GPK, Incrypto34 and + Westcos, disable Cyberflex driver. + * Fix 64b to 32b conversions. + * Improvements for the p11test. + * Fix reader initialization without SCardControl. + * Make RSA PKCS#1 v1.5 depadding constant-time. + * Add option for disabling PKCS#1 v1.5 depadding (type 01 and 02) + on the card. + * Fixed various issues reported by OSS-Fuzz and Coverity in + drivers, PKCS#11 and PKCS#15 layer. +- Add patch: + * opensc-docbook-xsl-fix.patch +- Drop not longer needed patches: + * CVE-2024-1454.patch +- Introduce subpackage for bash-completion + +------------------------------------------------------------------- Old: ---- CVE-2024-1454.patch opensc-0.24.0.tar.gz New: ---- opensc-0.25.0.tar.gz opensc-docbook-xsl-fix.patch BETA DEBUG BEGIN: Old:- Drop not longer needed patches: * CVE-2024-1454.patch - Introduce subpackage for bash-completion BETA DEBUG END: BETA DEBUG BEGIN: New:- Add patch: * opensc-docbook-xsl-fix.patch - Drop not longer needed patches: BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ opensc.spec ++++++ --- /var/tmp/diff_new_pack.1VbnHp/_old 2024-03-11 15:42:31.801418080 +0100 +++ /var/tmp/diff_new_pack.1VbnHp/_new 2024-03-11 15:42:31.805418228 +0100 @@ -18,7 +18,7 @@ %define completionsdir %(pkg-config --variable completionsdir bash-completion) Name: opensc -Version: 0.24.0 +Version: 0.25.0 Release: 0 Summary: Smart Card Utilities License: LGPL-2.1-or-later @@ -31,8 +31,8 @@ # https://web.archive.org/web/20111225073733/http://www.opensc-project.org/opensc/ticket/390 Source3: opensc.module Patch0: opensc-gcc11.patch -# PATCH-FIX-UPSTREAM martin.schrei...@suse.com CVE-2024-1454 bsc#1219868 -Patch1: CVE-2024-1454.patch +Patch1: opensc-docbook-xsl-fix.patch +BuildRequires: automake BuildRequires: docbook-xsl-stylesheets BuildRequires: libxslt BuildRequires: pkgconfig @@ -60,8 +60,20 @@ possible operations may be supported for your card. Card initialization may require third party proprietary software. +%package bash-completion +Summary: Bash Completion for %{name} +Group: Productivity/Security +Requires: %{name} = %{version} +Requires: bash-completion +Supplements: (%{name} and bash-completion) +BuildArch: noarch + +%description bash-completion +Bash completion script for %{name}. + %prep -%autosetup -p1 +%setup -q +%autopatch -p1 %build %configure \ @@ -101,5 +113,7 @@ %config %{_sysconfdir}/pkcs11/modules/ # This is a private library. There is no reason to split it to libopensc* package. %{_libdir}/libopensc.so.* + +%files bash-completion %{completionsdir}/* ++++++ opensc-0.24.0.tar.gz -> opensc-0.25.0.tar.gz ++++++ ++++ 31326 lines of diff (skipped) ++++++ opensc-docbook-xsl-fix.patch ++++++ diff --git a/doc/html.xsl b/doc/html.xsl index 665d45f..734fa98 100644 --- a/doc/html.xsl +++ b/doc/html.xsl @@ -3,7 +3,7 @@ <!ENTITY css SYSTEM "api.css"> ]> <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform"; version="1.0"> - <xsl:import href="docbook-utf8.xsl"/> + <xsl:import href="docbook.xsl"/> <xsl:param name="toc.section.depth" select="0"/> <xsl:param name="generate.consistent.ids" select="1"/> <xsl:template name="user.head.content">
