From 9df0534fc40f81c5a6a693624511701fc394ea1c Mon Sep 17 00:00:00 2001 From: Jakub Jelen Date: Wed, 4 Oct 2023 14:57:16 +0200 Subject: [PATCH] opensc-0.23.0-3 Resolves: RHEL-16450 --- opensc.spec | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/opensc.spec b/opensc.spec index 84392c2..05c4eef 100644 --- a/opensc.spec +++ b/opensc.spec @@ -3,7 +3,7 @@ Name: opensc Version: 0.23.0 -Release: 2%{?dist} +Release: 3%{?dist} Summary: Smart card library and applications License: LGPLv2+ @@ -244,6 +244,13 @@ rm %{buildroot}%{_mandir}/man1/opensc-notify.1* %changelog +* Thu Nov 30 2023 Jakub Jelen - 0.23.0-3 +- Fix file caching with different offsets (RHEL-4079) +- Fix CVE-2023-40660: Potential PIN bypass +- Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init +- Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys +- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding + * Thu May 25 2023 Jakub Jelen - 0.23.0-2 - Fix regression in handling OpenPGP cards - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos