From 1b6bd073dec691a99cd091224ed0afb04132c687 Mon Sep 17 00:00:00 2001
From: Jakub Jelen <jjelen@redhat.com>
Date: Thu, 2 Apr 2026 13:21:00 +0200
Subject: [PATCH] opensc-0.27.1-1

Resolves: RHEL-151598
---
 .gitignore  |  1 +
 opensc.spec | 10 ++++++----
 sources     |  2 +-
 3 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/.gitignore b/.gitignore
index f16d224..fd20e7e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,3 +15,4 @@
 /opensc-0.25.1.tar.gz
 /opensc-0.26.0.tar.gz
 /opensc-0.26.1.tar.gz
+/opensc-0.27.1.tar.gz
diff --git a/opensc.spec b/opensc.spec
index 104bccd..d85ad71 100644
--- a/opensc.spec
+++ b/opensc.spec
@@ -1,5 +1,5 @@
 Name:           opensc
-Version:        0.26.1
+Version:        0.27.1
 Release:        1%{?dist}
 Summary:        Smart card library and applications
 
@@ -62,19 +62,18 @@ OpenSC libraries.
 %patch 8 -p1 -b .file-cache
 
 XFAIL_TESTS="test-pkcs11-tool-test-threads.sh test-pkcs11-tool-test.sh"
- 
+
 # In FIPS mode, OpenSSL doesn't allow RSA-PKCS, this is hardcoded into OpenSSL
 # and we cannot influence it. Hence, the test is expected to fail in FIPS mode.
 if [[ -f "/proc/sys/crypto/fips_enabled" && $(cat /proc/sys/crypto/fips_enabled) == "1" ]]; then
 	XFAIL_TESTS+=" test-pkcs11-tool-unwrap-wrap-test.sh"
 fi
- 
+
 sed -i -e "/XFAIL_TESTS/,$ {
   s/XFAIL_TESTS.*/XFAIL_TESTS=$XFAIL_TESTS/
   q
 }" tests/Makefile.am
 
-
 cp -p src/pkcs15init/README ./README.pkcs15init
 cp -p src/scconf/README.scconf .
 # No {_libdir} here to avoid multilib conflicts; it's just an example
@@ -201,6 +200,9 @@ rm %{buildroot}%{_mandir}/man1/opensc-notify.1*
 
 
 %changelog
+* Thu Apr 02 2026 Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
+- Rebase to OpenSC 0.27.1 fixing outstanding security reports and bring in new PQC features (RHEL-151598)
+
 * Tue Jan 21 2025 Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
 - Rebase to new upstream release (RHEL-71523)
 - Separate OpenSC into libraries and binaries (RHEL-73314)
diff --git a/sources b/sources
index 2c80dc9..36a057d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (opensc-0.26.1.tar.gz) = 8555173b3727aede568290a3b288a46e74564050574b9a1e85487adc59532cb600e1f67c289b7430c8daca348fe928eb1e6e837e72c32731649403b19d53cfd8
+SHA512 (opensc-0.27.1.tar.gz) = 1d435938d5db45ffc60e2ac2512c42bc7ee893991d213b19033a60cabca19a7ddd5bf1f71bb172dcb77220bfa87abe92564b3edc878f22a87dfd4e7bcacf662f