diff --git a/opensc.spec b/opensc.spec index 84392c2..05c4eef 100644 --- a/opensc.spec +++ b/opensc.spec @@ -3,7 +3,7 @@ Name: opensc Version: 0.23.0 -Release: 2%{?dist} +Release: 3%{?dist} Summary: Smart card library and applications License: LGPLv2+ @@ -244,6 +244,13 @@ rm %{buildroot}%{_mandir}/man1/opensc-notify.1* %changelog +* Thu Nov 30 2023 Jakub Jelen - 0.23.0-3 +- Fix file caching with different offsets (RHEL-4079) +- Fix CVE-2023-40660: Potential PIN bypass +- Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init +- Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys +- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding + * Thu May 25 2023 Jakub Jelen - 0.23.0-2 - Fix regression in handling OpenPGP cards - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos