Changelog for opensc-0.19.0-76.3.x86_64.rpm :

* Sun Aug 18 2019 jsikesAATTsuse.com- added opensc-0.19.0-piv_card_matching.patch
* Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
* sourced from https://github.com/OpenSC/OpenSC/pull/1549
* Tue Jul 30 2019 jsikesAATTsuse.de- added opensc-0.19.0-rsa-pss.patch
* Fixes the pkcs11-tool example
* Added missing CKM_SHA224_RSA_PKCS_PSS
* Add support for PSS padding to RSA signatures
* Support for signature verification in pkcs11-tool
* Switch cleanup steps to avoid segfaults on errors and more sanity checking- added opensc-0.19.0-redundant_logging.patch
* Remove redundant debug output
* Tue Jul 23 2019 codeAATTbnavigator.de- add explicit BuildRequires: zlib-devel
* Thu Sep 13 2018 kbabiochAATTsuse.com- Update to version 0.19.0
* Fixed multiple security problems (out of bound writes/reads):
* CVE-2018-16391 (bsc#1106998)
* CVE-2018-16392 (bsc#1106999)
* CVE-2018-16393 (bsc#1108318)
* CVE-2018-16418 (bsc#1107039)
* CVE-2018-16419 (bsc#1107107)
* CVE-2018-16420 (bsc#1107097)
* CVE-2018-16421 (bsc#1107049)
* CVE-2018-16422 (bsc#1107038)
* CVE-2018-16423 (bsc#1107037)
* CVE-2018-16424 (bsc#1107036)
* CVE-2018-16425 (bsc#1107035)
* CVE-2018-16426 (bsc#1107034)
* CVE-2018-16427 (bsc#1107033)
* Workaround cards returning short signatures without leading zeroes
* Distribute minimal opensc.conf
* `pkcs11_enable_InitToken made` global configuration option
* Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver list instead of forcing one driver and skipping vital parts of configuration
* Removed configuration options `zero_ckaid_for_ca_certs`, `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
* Generalized configuration option `ignored_readers`
* If card initialization fails, continue card detection with other card drivers
* reader-pcsc: allow fixing the length of a PIN
* fixed crash during `C_WaitForSlotEvent`
* Allow cancelling the PIN pad prompt before starting the reader transaction. Whether to start the transaction immediately or not is user-configurable for each application
* opensc-notify
* add Exit button to tray icon
* User better description (GenericName) and a generic application icon
* Do not display in the application list- Removed patches included upstream now:
* opensc-desktop.patch
* opensc-desktop2.patch
* opensc-bash-completions.patch- Applied spec-cleaner
* Tue Jul 10 2018 sbrabecAATTsuse.com- Update to version 0.18.0:
* Further improvements of PIN support.
* Large number of improvements and fixes (boo#1097951, boo#1100501).
* See /usr/share/doc/packages/opensc/NEWS for complete list.- Add opensc-desktop.patch, opensc-desktop2.patch and opensc-bash-completions.patch.
* Mon Jan 01 2018 michaelAATTstroeder.com- update to version 0.17.0:
* support for new cards
* PIN support enhancemets
* added .pc file
* builds with OpenSSL 1.1.0 (1074799)
* See /usr/share/doc/packages/opensc/NEWS for complete list.
* Tue Jul 18 2017 tchvatalAATTsuse.com- Switch to tarball fetching from github- Few small cleanups
* Tue Nov 22 2016 sbrabecAATTsuse.com- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).- Drop opensc-ADVISORIES. There is no new advisory since 2009.
* Tue Jul 05 2016 t.grunerAATTkatodev.de- update to version 0.16.0- remove fix (issue 505)- clean up spec-file
* Thu Jul 30 2015 bwachter-pkgAATTlart.info- update to version 0.15.0- register with p11-kit (https://www.opensc-project.org/opensc/ticket/390)
* Mon Feb 16 2015 michaelAATTstroeder.com- update to version 0.14.0
* Tue Dec 03 2013 luizlucaAATTtre-sc.gov.br- update to version 0.13.0
* Tue Jun 12 2012 mgorseAATTsuse.com- make needed directories before running make install
* Thu Sep 29 2011 lmedinasAATTopensuse.org- Updated to version 0.12.2:
* Builds are now silent by default when OpenSC is built from source on Unix.
* Using --wait with command line tools works with 64bit Linux again.
* Greatly improved OpenPGP card support, including OpenPGP 2.0 cards like the one found in German Privacy Foundation CryptoStick.
* Fixed support for FINeID cards issued after 01.03.2011 with 2048bit keys.
* #256: Fixed support for TCOS cards (broken since 0.12.0).
* Added support for IDKey-cards to TCOS3 driver.
* #361: Improved PC/SC driver to fetch the maximum PIN sizes from the open source CCID driver. This fixes the issue for Linux/OSX with recent driver.
* Fix FINeID cards for organizations.
* Several smaller bugs and compiler warnings fixed- Updated to version 0.12.1:
* IAS-ECC 1.0.1
* Support for cards with multiple PKCS#15 applications
* New card driver: IAS/ECC 1.0.1
* rutoken-tool has been deprecated and removed.
* eidenv and piv-tool utilities now have manual pages.
* pkcs11-tool now requires the use of --module parameter.
* All tools can now use an ATR as an argument to --reader, to skip to the card with given ATR.
* opensc-tool -l with -v now shows information about the inserted cards.
* Creating files have an enforced upper size limit, 64K
* Support for multiple PKCS#15 applications with different AID-s. PKCS#15 applications can be listed with pkcs15-tool - -list-applications. Binding to a specific AID with PKCS#15 tools can be done with --aid.
* Hex strings (like card ATR or APDU-s) can now be separated by space, in addition to colons.
* Pinpad readers known to be bogus are now ignored by OpenSC. At the moment only \"HP USB Smart Card Keyboard\" is disabled.
* Numerous compiler warnings, unused code and internal bugs have been eliminated.
* Fri Jan 07 2011 sbrabecAATTsuse.cz- Updated to version 0.12.0:
* Security fix (bnc#660109, CVE-2010-4523).
* Only one backend is supported. openSUSE will use pcsc-lite.
* libopensc made private, library should not be used by other applications. Please use generic PKCS#11 interface instead.
* Signer plugin discontinued. Please use openssl engine_pkcs11.
* No more depends on libassuan.
* New card drivers.
* Support for CardOS enhanced.
* More changes and enhancements.- libopensc merged back to the main package, as it is private now.
* Mon Aug 23 2010 sbrabecAATTsuse.cz- Fixed broken opensc-fix-gcc-warnings.patch (bnc#627619).- Simplified plugin installation.
* Tue Apr 13 2010 puzelAATTnovell.com- update to version 0.11.13
* Modify Rutoken S binary interfaces by Aktiv Co.
* Muscle driver fixed (acl reading issue)
* Many small fixes (e.g. mem leaks)
* Compiling with openssl 1.0.0-beta fixed
* Document integer problem in OpenSC and implement workaround
* Improve entersafe profile to support private data objects- Require pinentry- add opensc-libassuan-2.patch- add opensc-fix-gcc-warnings.patch
* Fri Jan 01 2010 jengelhAATTmedozas.de- package baselibs.conf
* Wed Aug 05 2009 sbrabecAATTsuse.cz- Updated to version 0.11.9:
* New rutoken_ecp driver
* Allow more keys/certificates/files etc. with entersafe tokens
* Updates pkcs11.h from scute fixing warnings
* Small fixes in rutoken driver
* Major update for piv driver with increased compatibility
* Thu Jul 30 2009 sbrabecAATTsuse.cz- libopensc2 should not require opensc (bnc#466430).
* Thu May 07 2009 sbrabecAATTsuse.cz- Updated to version 0.11.8:
* Fix security problem in pkcs11-tool gen_keypair (PublicExponent 1) (bnc#501726) See http://en.opensuse.org/Smart_Cards/Advisories for more.
* updated and improve entersafe driver. FTCOS/PK-01C cards are supported now, compatible with cards writen by Feitian\'s software on windows.
* Thu Apr 09 2009 sbrabecAATTsuse.cz- Fixed undefined code (bnc#440853).- Don\'t call autoreconf on older products.
* Tue Mar 17 2009 sbrabecAATTsuse.cz- Updated to version 0.11.7:
* hide_empty_slots now on by default? small logic change?
* ruToken driver was updated.
* openct virtual readers reduced to 2 by default.
* Security issue: Fix private data support. (bnc#480262, CVE-2009-0368) See http://en.opensuse.org/Smart_Cards/Advisories for more.
* Enable lock_login by default.
* Disable allow_soft_keygen by default.