Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=walnascar 2025-01-25T02:20:01+00:00 2025-01-25T02:20:01+00:00 Wang Mingyu wangmy@fujitsu.com 2025-01-20T08:13:46+00:00 urn:sha1:54df7d1fb9121509903bfca46ebc49ffa168e640 Changelog: ========== ## General improvements * Align allocations of sc_mem_secure_alloc * Fix -O3 gcc optimization failure on amd64 and ppc64el ## pkcs11-spy * Avoid crash while spying C_GetInterface() ## TCOS * Fix reading certificate Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-12-21T03:47:55+00:00 Peter Marko peter.marko@siemens.com 2024-12-20T15:36:20+00:00 urn:sha1:2a432397cd388f22a747c461451600119f6cbd46 NVD tracks this CVE as version-less. Per [1] this is fixed by following commits: $ git tag --contains b28a3cef416fcfb92fbb9ea7fd3c71df52c6c9fc 0.26.0 0.26.0-rc1 $ git tag --contains 02e847458369c08421fd2d5e9a16a5f272c2de9e 0.26.0 0.26.0-rc1 [1] https://github.com/OpenSC/OpenSC/wiki/CVE-2024-8443 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-12-21T03:47:55+00:00 Peter Marko peter.marko@siemens.com 2024-12-20T15:36:19+00:00 urn:sha1:0b3e7c1fd6425bfbb142f5a59a3f3a3f8e9dd594 Solves CVE-2024-45615, CVE-2024-45616, CVE-2024-45617, CVE-2024-45618, CVE-2024-45619 and CVE-2024-45620. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-08-21T15:47:07+00:00 Niko Mauno niko.mauno@vaisala.com 2024-08-21T15:34:16+00:00 urn:sha1:990955ba0941f207b5f4c9ead9f316c4afb5c6b9 Apply some suggestions from oe-stylize.py and sort configure options alphabetically, and remove stale version comment line which has not been updated for some time. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-08-21T15:47:06+00:00 Niko Mauno niko.mauno@vaisala.com 2024-08-21T15:34:15+00:00 urn:sha1:cef49b830fe765457072e956cf3a5916d60bf2ce According to https://github.com/OpenSC/OpenSC/wiki#license OpenSC is licensed under LGPL-2.1 or later, which seems to be affirmed also by the comments in the source code files, as well as the COPYING file. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-08-21T15:47:06+00:00 Niko Mauno niko.mauno@vaisala.com 2024-08-21T15:34:14+00:00 urn:sha1:f70274aa2b1b7303a9cf7e66b05b0972d30002be According to https://github.com/OpenSC/OpenSC/blob/0.25.1/NEWS#L1124-L1125 since version 0.12.0 the iconv dependency has been removed. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-08-21T15:47:06+00:00 Niko Mauno niko.mauno@vaisala.com 2024-08-21T15:34:13+00:00 urn:sha1:c066a6ff83cf0170a3d8770024ad45ff1c1eaec9 This helps us to also get rid of associated RDEPENDS declaration which implicitly pulled readline to rootfs, even configure resolved readline as not enabled. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-08-21T15:47:06+00:00 Niko Mauno niko.mauno@vaisala.com 2024-08-21T15:34:12+00:00 urn:sha1:dac59629e9c44e075cce813c21bdde48516d4153 Commit da68f807bd718fb848acc792fd9326df719e0880 added the symlink .so path to FILES:${PN}-dev to fix QA error, complement the operation by removing identical line from FILES:${PN} Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-04-18T06:47:24+00:00 Wang Mingyu wangmy@fujitsu.com 2024-04-17T01:40:26+00:00 urn:sha1:89af1300cfce9e720d122454e6b6f0b72502b5bd Changelog: ============ * Add missing file to dist tarball to build documentation * Fix RSA decryption with PKCS#1 v1.5 padding * Fix crash when app is not set Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-03-20T16:28:06+00:00 Wang Mingyu wangmy@fujitsu.com 2024-03-19T05:45:04+00:00 urn:sha1:fc996b19289f69b16f34e84f45fc06ea13749759 Changelog: ============ ## Security * [CVE-2023-5992]: Side-channel leaks while stripping encryption PKCS#1.5 padding in OpenSC * [CVE-2024-1454]: Potential use-after-free in AuthentIC driver during card enrollment in pkcs15init ## General improvements * Update OpenSSL 1.1.1 to 3.0 in MacOS build * Remove support for old card drivers Akis, GPK, Incrypto34 and Westcos, disable Cyberflex driver * Fix 64b to 32b conversions * Improvements for the p11test * Fix reader initialization without SCardControl * Make RSA PKCS#1 v1.5 depadding constant-time * Add option for disabling PKCS#1 v1.5 depadding (type 01 and 02) on the card * Enable MSI signing via Signpath CI integration for Windows * Fixed various issues reported by OSS-Fuzz and Coverity in drivers Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>