Lots of new support, improvements but also CVE fixes, see
https://github.com/OpenSC/OpenSC/wiki#news
Testing and version string fix from Gabriel Kihlman, thanks!
OK rsadowski
This release contains fixes for mutliple issues, ranging from stack based
buffer overflows to out of bounds reads and writes on the heap. They can
be triggered by malicious smartcards sending malformed responses to APDU
commands. A detailed description can be found at X41-2018-002
<https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/>.
While here, replace hardcoded 0644 with ${NONBINMODE} and adjust the
default PKCS11 provider path to opensc-pkcs11.so so pkcs11-tool(1) works
without having to it pass it `--module' all the time.
OK sthen rsadowski
OpenSC provides a set of libraries and utilities to access smart cards.
Its main focus is on cards that support cryptographic operations, and
facilitate their use in security applications such as mail encryption,
authentication, and digital signature. OpenSC implements the PKCS#11 API
so applications supporting this API such as Mozilla Firefox and
Thunderbird can use it. OpenSC implements the PKCS#15 standard and aims
to be compatible with every software that does so, too.
From Douglas Santos <dsantos@hydroxyl.org>