Pivy is an implementation of a simple PIV client with minimal dependencies.
It contains a pivy-tool binary which can conduct basic operations using
PIV cards, and the pivy-agent, which implements the SSH agent protocol as
a drop-in replacement for the OpenSSH ssh-agent command (except that the
keys it contains are always on a PIV card).
"PIV cards" notably includes Yubico Yubikey devices such as the NEO and
Yubikey4, which can store up to 24 keys by using the "retired key" slots
(which this agent supports).
ok (and much help from) sthen@
(added in f2451e8aeba) - some hangs seen, but it's better than not being
implemented at all.
switch MODPY_FLAVOR to FLAVOR=python3 while there, and sync py-pyscard dep.
trying to auto detect, which picks up gcc on those base-clang arches
which still install gcc (which I think is now causing more problems
than it solves).
Fixes a build problem reported by solene@ on i386 with old /usr/bin/gcc
present after the installer auto-removed old gcc-libs.
nipper and libnipper became comercial over ten years ago and have not been
updated ever since; HOMEPAGE doesn't even mention them any longer.
Pointed out by Marcus MERIGHI <mcmer-openbsd at tor dot at>, thanks!
OK sthen jca
- [CVE-2020-3327](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3327):
Fix a vulnerability in the ARJ archive parsing module in ClamAV 0.102.2 that
could cause a Denial-of-Service (DoS) condition. Improper bounds checking of
an unsigned variable results in an out-of-bounds read which causes a crash.
Special thanks to Daehui Chang and Fady Othman for helping identify the ARJ
parsing vulnerability.
- [CVE-2020-3341](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3341):
Fix a vulnerability in the PDF parsing module in ClamAV 0.101 - 0.102.2 that
could cause a Denial-of-Service (DoS) condition. Improper size checking of
a buffer used to initialize AES decryption routines results in an out-of-
bounds read which may cause a crash. Bug found by OSS-Fuzz.
- Fix "Attempt to allocate 0 bytes" error when parsing some PDF documents.
- Fix a couple of minor memory leaks.
- Updated libclamunrar to UnRAR 5.9.2.
