Changelog for opensc-0.20.0-8.el8_9.x86_64.rpm :

* Thu Feb 08 2024 Veronika Hanulikova - 0.20.0-8- Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding
* Thu Nov 30 2023 Jakub Jelen - 0.20.0-7- Fix file caching with different offsets (RHEL-4077)- Fix CVE-2023-40660: Potential PIN bypass- Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init- Fix CVE-2023-5992: Marvin: Side-channel leaks while stripping encryption PKCS#1.5 padding
* Tue Jul 11 2023 Jakub Jelen - 0.20.0-6- Fix introduced issues tagged by coverity (RHEL-765)
* Thu Jun 15 2023 Jakub Jelen - 0.20.0-5- Avoid potential crash because of missing list terminator (#2196234)- Fix CVE-2023-2977: potential buffer overrun in pkcs15 cardos_have_verifyrc_package (#2211093)- Backport upstream changes regarding to reader removal (#2097048)
* Fri Nov 20 2020 Jakub Jelen - 0.20.0-4- Use file cache by default (#1892810)- Avoid calloc with 0 argument (#1895401)
* Tue Oct 20 2020 Jakub Jelen - 0.20.0-3- Support PIN change for HID Alt tokens (#1830901)- Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572- Fix right padding of token labels of some cards (#1877973)
* Wed May 27 2020 Jakub Jelen - 0.20.0-2- Unbreak different CardOS 5 configurations supporting raw RSA (#1830856)
* Wed Apr 22 2020 Jakub Jelen - 0.20.0-1- Rebase to current upstream release (#1810660)
* Mon Nov 25 2019 Jakub Jelen - 0.19.0-7- Unbreak RSA-PSS mechanisms in -6 release (#1775673)
* Thu Nov 14 2019 Jakub Jelen - 0.19.0-6- Add support for Gemalto IDPrime smart cards (#1657970)- Fix 2k RSA key operations with Coolkey (#1766712)
* Thu Apr 18 2019 Jakub Jelen - 0.19.0-5- Avoid multilib issues (#1693380)
* Wed Dec 12 2018 Jakub Jelen - 0.19.0-4- Unbreak the Dual CAC cards in PIV driver (#1651748)- Fix few more corner cases for handling different types of padding (#1595626)- Unbreak signature verification in pkcs11-tool (#1651748)
* Wed Oct 31 2018 Jakub Jelen - 0.19.0-3- Unbreak the RSA-PSS mechanisms (#1595626)- Unbreak the signing using hashed mechanisms in CardOS and others (#1644338)
* Mon Oct 22 2018 Jakub Jelen - 0.19.0-2- Avoid mismatching coolkey cards for muscle ones (#1588722)- Implement legacy CAC1 driver (#1638052)- Disable pinpad- Fixup verification after RSA-PSS implementation
* Tue Sep 25 2018 Jakub Jelen - 0.19.0-1- New upstream release fixing various CVE-2018-16418 - 16421, 16423 - 16427- Add support for RSA-PSS signatures
* Fri Jul 13 2018 Fedora Release Engineering - 0.18.0-4- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jul 12 2018 Jakub Jelen - 0.18.0-3- Do not add pkcs11 module to NSS after installation (NSS is loading p11-kit modules by default)- Remove pkcs11-switch since there is nothing to switch to
* Mon May 21 2018 Jakub Jelen - 0.18.0-2- Backport a fix for C_WaitForSlotEvent crash (#1579933)
* Thu May 17 2018 Jakub Jelen - 0.18.0-1- New upstream release (#1567503)
* Wed Apr 04 2018 Jakub Jelen - 0.17.0-10- Install the PKCS#11 modules also to the new NSS DB- Drop the pkcs11-switch as the coolkey is gone
* Tue Apr 03 2018 Jakub Jelen - 0.17.0-9- Improved support for CloudHSM (#1562572)
* Mon Mar 19 2018 Jakub Jelen - 0.17.0-8- Build requires gcc- Backport a fix for feitian tokens (#1558099)
* Fri Mar 02 2018 Jakub Jelen - 0.17.0-7- Obsolete coolkey- Do not report bogus errors from pkcs11-switch- Do not delete nonexisting modules during uninstall (#1526670)
* Wed Feb 21 2018 Jakub Jelen - 0.17.0-6- PIV: Use Cardholder name in the token label- Avoid infinite loop when reading CAC cards- Properly parse multi-byte length in SimpleTLV- Support CAC Alt tokens
* Thu Feb 08 2018 Fedora Release Engineering - 0.17.0-5- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Mon Dec 04 2017 Jakub Jelen - 0.17.0-4- Allow functionality of a new Estonia ID cards (#1519751)
* Thu Aug 03 2017 Fedora Release Engineering - 0.17.0-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering - 0.17.0-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Wed Jul 19 2017 Jakub Jelen - 0.17.0-1- New upstream release including support for Coolkey and CAC cards
* Tue Feb 28 2017 Jakub Jelen - 0.16.0-5.20161016git0362439- Add PKCS#11 library to the NSS DB (#1421692)
* Sat Feb 11 2017 Fedora Release Engineering - 0.16.0-4.20161016git0362439- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Jan 12 2017 Igor Gnatenko - 0.16.0-3.20161016git0362439- Rebuild for readline 7.x
* Mon Oct 31 2016 Jakub Jelen - 0.16.0-2.20161016git0362439- Updated to latest git to address openssl 1.1.0 compilation issues (#1388895)- Do not own /etc/bash_completion.d directory (#1303441)
* Tue Aug 02 2016 Jakub Jelen - 0.16.0-1- New upstream release 0.16.0 (#1306071)
* Tue Jul 12 2016 Jakub Jelen - 0.15.0-6- Add support for 2048 key length (#1350588)- Explicitly set CKA_PRIVATE to false when writing certificates (#1272127)
* Thu Feb 04 2016 Fedora Release Engineering - 0.15.0-5- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Mon Jan 18 2016 Nikos Mavrogiannopoulos - 0.15.0-4- Fix a crash in accessing public key (#1298669)
* Thu Nov 19 2015 Nikos Mavrogiannopoulos - 0.15.0-3- Export PKCS#11 symbols from spy library (#1283306)
* Tue Aug 04 2015 Nikos Mavrogiannopoulos - 0.15.0-2- Updated fix for issue with C_Initialize after fork() (#1218797)
* Tue Jul 14 2015 Nikos Mavrogiannopoulos - 0.15.0-1- Update to 0.15.0 (#1209682)- Solve issue with C_Initialize after fork() (#1218797)
* Thu Jun 18 2015 Fedora Release Engineering - 0.14.0-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sun Aug 17 2014 Fedora Release Engineering - 0.14.0-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Tue Jul 01 2014 Nikos Mavrogiannopoulos - 0.14.0-1- new upstream version
* Sat Jun 07 2014 Fedora Release Engineering - 0.13.0-13- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Feb 28 2014 Nikos Mavrogiannopoulos - 0.13.0-12- Added fix for crash when calling pkcs11-tool with an invalid module (#1071368)- Added fix for invalid parameters passed to module by pkcs11-tool when importing a private key (#1071369)- Configuration file opensc.conf was renamed to opensc-arch.conf to avoid multi-arch issues.
* Fri Jan 31 2014 Nikos Mavrogiannopoulos - 0.13.0-11- Corrected installation path of opensc.module (#1060053)
* Mon Jan 06 2014 Nikos Mavrogiannopoulos - 0.13.0-10- Applied myeid related patch (#1048576)
* Thu Jan 02 2014 Nikos Mavrogiannopoulos - 0.13.0-9- Applied epass2003 related patch (#981462)
* Mon Dec 23 2013 Nikos Mavrogiannopoulos - 0.13.0-8- Compile using the --enable-sm option (related but does not fix #981462)
* Wed Dec 18 2013 Nikos Mavrogiannopoulos - 0.13.0-7- Ensure that pcsc-lite is depended on (#1029133)
* Mon Sep 23 2013 Stef Walter - 0.13.0-6- Install p11-kit config file to the right place (#999190)
* Sat Aug 03 2013 Fedora Release Engineering - 0.13.0-5- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Fri Mar 08 2013 Stef Walter - 0.13.0-4- Use the standard name format for p11-kit module configs- Put the p11-kit module config is the system location
* Thu Feb 14 2013 Fedora Release Engineering - 0.13.0-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sun Jan 13 2013 Kalev Lember - 0.13.0-2- Backport an upstream patch for fixing pkcs15 cert length calculation
* Thu Jan 03 2013 Milan Broz - 0.13.0-1- Update to 0.13.0 (#890770)- Remove no longer provided onepin-opensc-pkcs11.so.- Add iasecc-tool, openpgp-tool and sc-hsm-tool.
* Fri Jul 27 2012 Tomas Mraz - 0.12.2-6- Add a configuration file for p11-kit (#840504)
* Fri Jul 20 2012 Fedora Release Engineering - 0.12.2-5- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sun Mar 04 2012 Peter Robinson - 0.12.2-4- Add patch for dso
* Fri Jan 13 2012 Fedora Release Engineering - 0.12.2-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Wed Aug 17 2011 Tomas Mraz - 0.12.2-2- Rebuilt to fix trailing slashes in filelist from rpmbuild bug
* Tue Jul 19 2011 Kalev Lember - 0.12.2-1- Update to 0.12.2 (#722659)
* Wed May 18 2011 Kalev Lember - 0.12.1-1- Update to 0.12.1 (#705743)- Removed BR libtool-ltdl-devel to build with glibc\'s libdl instead
* Tue Apr 12 2011 Tomas Mraz - 0.12.0-4- drop multilib conflicting and duplicated doc file (#695368)
* Tue Feb 08 2011 Fedora Release Engineering - 0.12.0-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon Jan 03 2011 Kalev Lember - 0.12.0-2- Disabled asserts
* Mon Jan 03 2011 Kalev Lember - 0.12.0-1- Update to 0.12.0- Removed and obsoleted mozilla-opensc-signer and opensc-devel subpackages- Dropped patches which are now upstreamed- It is no longer possible to build in both pcsc-lite and openct support, so opensc now gets built exclusively with pcsc-lite.
* Tue Dec 21 2010 Tomas Mraz - 0.11.13-6- fix buffer overflow on rogue card serial numbers
* Tue Oct 19 2010 Tomas Mraz - 0.11.13-5- own the _libdir/pkcs11 subdirectory (#644527)
* Tue Sep 07 2010 Tomas Mraz - 0.11.13-4- fix build with new pcsc-lite
* Wed Aug 11 2010 Rex Dieter - 0.11.13-3- build against libassuan1 (f14+)
* Wed Jun 09 2010 Tomas Mraz - 0.11.13-2- replace file dependency (#601943)
* Tue Feb 16 2010 Kalev Lember - 0.11.13-1- new upstream version
* Sun Feb 14 2010 Kalev Lember - 0.11.12-2- Added patch to fix linking with the new --no-add-needed default (#564758)
* Mon Dec 21 2009 Kalev Lember - 0.11.12-1- new upstream version- replaced %define with %global- BR clean up from items not applicable to current Fedora releases
* Tue Dec 08 2009 Michael Schwendt - 0.11.11-2- Explicitly BR libassuan-static in accordance with the Packaging Guidelines (libassuan-devel is still static-only).
* Thu Nov 19 2009 Tomas Mraz - 0.11.11-1- new upstream version
* Tue Sep 29 2009 Tomas Mraz - 0.11.9-2- fix multilib conflict in the configuration file (#526269)
* Wed Sep 09 2009 Tomas Mraz - 0.11.9-1- new upstream version
* Fri Aug 21 2009 Tomas Mraz - 0.11.8-5- rebuilt with new openssl
* Mon Jul 27 2009 Tomas Mraz - 0.11.8-4- Depend on specific arch of pcsc-lite-libs (reported by Kalev Lember)
* Sat Jul 25 2009 Fedora Release Engineering - 0.11.8-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Mon Jun 15 2009 Tomas Mraz - 0.11.8-2- Rebuilt with new openct
* Mon May 11 2009 Tomas Mraz - 0.11.8-1- new upstream version - fixes security issue
* Fri Feb 27 2009 Tomas Mraz - 0.11.7-1- new upstream version - fixes CVE-2009-0368
* Thu Feb 26 2009 Fedora Release Engineering - 0.11.6-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Thu Jan 15 2009 Tomas Mraz - 0.11.6-2- Add explicit requires for pcsc-lite-libs. Dlopen libpcsclite with the full soname.
* Tue Sep 02 2008 Tomas Mraz - 0.11.6-1- Update to latest upstream, fixes CVE-2008-2235
* Thu Apr 10 2008 Hans de Goede - 0.11.4-5- BuildRequire libassuan-devel instead of libassuan-static (bz 441812)
* Tue Feb 19 2008 Fedora Release Engineering - 0.11.4-4- Autorebuild for GCC 4.3
* Wed Dec 05 2007 Release Engineering - 0.11.4-3- Rebuild for deps
* Wed Dec 05 2007 Ville Skyttä - 0.11.4-2- Rebuild.
* Mon Sep 10 2007 Ville Skyttä - 0.11.4-1- 0.11.4.
* Mon Aug 20 2007 Ville Skyttä - 0.11.4-0.1.rc1- 0.11.4-rc1, pkcs11-tool usage message fix applied upstream.- License: LGPLv2+
* Thu Jul 26 2007 Ville Skyttä - 0.11.3-2- Fix pkcs11-tool usage message crash (#249702).
* Tue Jul 17 2007 Ville Skyttä - 0.11.3-1- 0.11.3.
* Sat Jun 30 2007 Ville Skyttä - 0.11.3-0.1.pre2- 0.11.3-pre2.
* Thu Jun 21 2007 Ville Skyttä - 0.11.3-0.1.pre1- 0.11.3-pre1.
* Sun May 06 2007 Ville Skyttä - 0.11.2-2- Add explicit build dependency on ncurses-devel.
* Sat May 05 2007 Ville Skyttä - 0.11.2-1- 0.11.2.
* Tue Apr 24 2007 Ville Skyttä - 0.11.2-0.3.rc2- 0.11.2-rc2.
* Fri Mar 23 2007 Ville Skyttä - 0.11.2-0.3.rc1- 0.11.2-rc1.
* Thu Mar 15 2007 Ville Skyttä - 0.11.2-0.2.pre6- 0.11.2-pre6.
* Tue Mar 06 2007 Ville Skyttä - 0.11.2-0.2.pre4- 0.11.2-pre4.- Require pinentry-gui instead of the pinentry executable in signer.
* Sun Dec 03 2006 Ville Skyttä - 0.11.2-0.1.pre3- 0.11.2-pre3.- Build with new libassuan.- Don\'t run autotools during build.- Adjust to readline/termcap/ncurses changes.
* Sat Oct 14 2006 Ville Skyttä - 0.11.1-6- Rebuild with new libassuan.
* Sun Oct 08 2006 Ville Skyttä - 0.11.1-5- Rebuild with new libassuan.
* Mon Oct 02 2006 Ville Skyttä - 0.11.1-4- Rebuild.
* Tue Sep 26 2006 Ville Skyttä - 0.11.1-3- Rebuild with new libassuan.
* Sat Sep 02 2006 Ville Skyttä - 0.11.1-2- Rebuild.
* Wed May 31 2006 Ville Skyttä - 0.11.1-1- 0.11.1.- Avoid some multilib conflicts.
* Sun May 07 2006 Ville Skyttä - 0.11.0-2- Sync example paths in openct.conf with ctapi-common.- Update URL.
* Thu May 04 2006 Ville Skyttä - 0.11.0-1- 0.11.0.
* Thu Apr 27 2006 Ville Skyttä - 0.11.0-0.1.rc2- 0.11.0-rc2.
* Sat Apr 22 2006 Ville Skyttä - 0.11.0-0.1.rc1- 0.11.0-rc1.
* Mon Mar 06 2006 Ville Skyttä - 0.10.1-3- Rebuild.
* Wed Feb 15 2006 Ville Skyttä - 0.10.1-2- Avoid standard rpaths on lib64 archs.
* Sun Jan 08 2006 Ville Skyttä - 0.10.1-1- 0.10.1.
* Wed Nov 09 2005 Ville Skyttä - 0.10.0-1- 0.10.0.- Adapt to modularized X.Org.
* Wed Oct 26 2005 Ville Skyttä - 0.10.0-0.1.rc2- 0.10.0-rc2.- Install signer plugin only to plugin dir.
* Sat Oct 22 2005 Ville Skyttä - 0.10.0-0.1.rc1- 0.10.0-rc1.
* Wed Oct 19 2005 Ville Skyttä - 0.10.0-0.1.beta2.rc1- 0.10.0-beta2-rc1.- Specfile cleanups.
* Tue Apr 26 2005 Ville Skyttä - 0.9.6-2- 0.9.6, build patch applied upstream.- Package summary and description improvements.- Drop explicit openct dependency.
* Fri Mar 18 2005 Ville Skyttä - 0.9.4-3- Fix FC4 build.- Rename opensc-pam to pam_opensc per package naming guidelines.
* Wed Feb 09 2005 Michael Schwendt - 0.9.4-2- Substitute hardcoded \'lib\' in OpenSSL checks for multi-lib platforms.- Use --with-plugin-dir instead of --with-plugin-path (fixes x86_64).
* Thu Feb 03 2005 Ville Skyttä - 0.9.4-1- Drop unnecessary Epochs, pre-FC1 compat cruft, and no longer relevant --with(out) rpmbuild options.- Exclude
*.la.
* Wed Nov 03 2004 Ville Skyttä - 0:0.9.4-0.fdr.1- Update to 0.9.4, parallel build patch applied upstream.- Patch to fix library paths and LDFLAGS.- Don\'t require mozilla, but the plugin dir in signer.- Build with dependency tracking disabled.
* Tue Jul 27 2004 Ville Skyttä - 0:0.9.2-0.fdr.2- Building the signer plugin can be disabled with \"--without signer\". Thanks to Fritz Elfert for the idea.- Update description.
* Sun Jul 25 2004 Ville Skyttä - 0:0.9.2-0.fdr.1- Update to 0.9.2, old patches applied upstream.- Add patch to fix parallel builds.- Convert man pages to UTF-8.
* Thu Jul 22 2004 Ville Skyttä - 0:0.9.1-0.fdr.1- Update to 0.9.1 (preview).
* Thu Jul 01 2004 Ville Skyttä - 0:0.9.0-0.fdr.0.1.alpha- Update to 0.9.0-alpha.
* Sat May 01 2004 Ville Skyttä - 0:0.8.1-0.fdr.8- Rebuild with libassuan 0.6.5.
* Sat Jan 31 2004 Ville Skyttä - 0:0.8.1-0.fdr.7- Rebuild with libassuan 0.6.3.- Add gdm example to PAM quickstart.
* Mon Jan 19 2004 Ville Skyttä - 0:0.8.1-0.fdr.6- Use /%{_lib} instead of hardcoding /lib.
* Sat Dec 20 2003 Ville Skyttä - 0:0.8.1-0.fdr.5- Split PAM support into a subpackage.- Rebuild with libassuan 0.6.2.
* Sun Nov 23 2003 Ville Skyttä - 0:0.8.1-0.fdr.4- Rebuild with libassuan 0.6.1.- Include PAM quickstart doc snippet.
* Fri Nov 14 2003 Ville Skyttä - 0:0.8.1-0.fdr.3- Require OpenCT.
* Fri Oct 17 2003 Ville Skyttä - 0:0.8.1-0.fdr.2- Install example config files as documentation.
* Tue Oct 14 2003 Ville Skyttä - 0:0.8.1-0.fdr.1- Update to 0.8.1.
* Wed Aug 27 2003 Ville Skyttä - 0:0.8.0-0.fdr.2- Signer can be built with oldssl too.
* Wed Aug 27 2003 Ville Skyttä - 0:0.8.0-0.fdr.1- Update to 0.8.0.
* Wed Jul 30 2003 Ville Skyttä - 0:0.8.0-0.fdr.0.2.cvs20030730- Update to 20030730.- Clean up %docs.- Include
*.la (uses ltdl).- Own the %{_libdir}/pkcs11 directory.- Disable signer; assuan has disappeared from the tarball :(
* Fri May 23 2003 Ville Skyttä - 0:0.8.0-0.fdr.0.1.rc1- First build.