mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-16 04:17:25 +00:00
Zhang Peng
4cbf9d8d2c
CVE-2023-5992: A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2023-5992] [https://github.com/OpenSC/OpenSC/wiki/CVE-2023-5992] Upstream patches: [https://github.com/OpenSC/OpenSC/pull/2948] [https://github.com/OpenSC/OpenSC/pull/3016] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
106 lines
3.9 KiB
BlitzBasic
106 lines
3.9 KiB
BlitzBasic
SUMMARY = "Smart card library and applications"
|
|
DESCRIPTION = "OpenSC is a tool for accessing smart card devices. Basic\
|
|
functionality (e.g. SELECT FILE, READ BINARY) should work on any ISO\
|
|
7816-4 compatible smart card. Encryption and decryption using private\
|
|
keys on the smart card is possible with PKCS\
|
|
such as the FINEID (Finnish Electronic IDentity) card. Swedish Posten\
|
|
eID cards have also been confirmed to work."
|
|
|
|
HOMEPAGE = "http://www.opensc-project.org/opensc/"
|
|
SECTION = "System Environment/Libraries"
|
|
LICENSE = "LGPL-2.1-or-later"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=cb8aedd3bced19bd8026d96a8b6876d7"
|
|
|
|
#v0.21.0
|
|
SRCREV = "c902e1992195e00ada12d71beb1029287cd72037"
|
|
SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https \
|
|
file://CVE-2023-2977.patch \
|
|
file://CVE-2023-40660.patch \
|
|
file://CVE-2023-40661-1.patch \
|
|
file://CVE-2023-40661-2.patch \
|
|
file://CVE-2023-40661-3.patch \
|
|
file://CVE-2023-40661-4.patch \
|
|
file://CVE-2023-40661-5.patch \
|
|
file://CVE-2023-40661-6.patch \
|
|
file://CVE-2023-40661-7.patch \
|
|
file://CVE-2024-1454.patch \
|
|
file://CVE-2024-8443-0001.patch \
|
|
file://CVE-2024-8443-0002.patch \
|
|
file://CVE-2024-45615-0001.patch \
|
|
file://CVE-2024-45615-0002.patch \
|
|
file://CVE-2024-45615-0003.patch \
|
|
file://CVE-2024-45615-0004.patch \
|
|
file://CVE-2024-45615-0005.patch \
|
|
file://CVE-2024-45616-0001.patch \
|
|
file://CVE-2024-45616-0002.patch \
|
|
file://CVE-2024-45616-0003.patch \
|
|
file://CVE-2024-45616-0004.patch \
|
|
file://CVE-2024-45616-0005.patch \
|
|
file://CVE-2024-45616-0006.patch \
|
|
file://CVE-2024-45616-0007.patch \
|
|
file://CVE-2024-45616-0008.patch \
|
|
file://CVE-2024-45616-0009.patch \
|
|
file://CVE-2024-45616-0010.patch \
|
|
file://CVE-2024-45617-0001.patch \
|
|
file://CVE-2024-45617-0002.patch \
|
|
file://CVE-2024-45617-0003.patch \
|
|
file://CVE-2024-45618-0001.patch \
|
|
file://CVE-2024-45618-0002.patch \
|
|
file://CVE-2024-45619-0001.patch \
|
|
file://CVE-2024-45619-0002.patch \
|
|
file://CVE-2024-45619-0003.patch \
|
|
file://CVE-2024-45619-0004.patch \
|
|
file://CVE-2024-45619-0005.patch \
|
|
file://CVE-2024-45619-0006.patch \
|
|
file://CVE-2024-45620-0001.patch \
|
|
file://CVE-2024-45620-0002.patch \
|
|
file://CVE-2024-45620-0003.patch \
|
|
file://CVE-2023-5992-0001.patch \
|
|
file://CVE-2023-5992-0002.patch \
|
|
file://CVE-2023-5992-0003.patch \
|
|
file://CVE-2023-5992-0004.patch \
|
|
file://CVE-2023-5992-0005.patch \
|
|
file://CVE-2023-5992-0006.patch \
|
|
file://CVE-2023-5992-0007.patch \
|
|
file://CVE-2023-5992-0008.patch \
|
|
file://CVE-2023-5992-0009.patch \
|
|
file://CVE-2023-5992-0010.patch \
|
|
"
|
|
|
|
# CVE-2021-34193 is a duplicate CVE covering the 5 individual
|
|
# https://github.com/OpenSC/OpenSC/pull/2855/commits/7a049fc3922060fb75cb9fea9e58eef9edc357ae
|
|
CVE_CHECK_IGNORE += "CVE-2021-34193"
|
|
|
|
DEPENDS = "virtual/libiconv openssl"
|
|
|
|
S = "${WORKDIR}/git"
|
|
inherit autotools pkgconfig bash-completion
|
|
|
|
EXTRA_OECONF = " \
|
|
--disable-static \
|
|
--disable-ctapi \
|
|
--disable-doc \
|
|
--disable-strict \
|
|
"
|
|
EXTRA_OEMAKE = "DESTDIR=${D}"
|
|
|
|
PACKAGECONFIG ??= "pcsc"
|
|
|
|
PACKAGECONFIG[openct] = "--enable-openct,--disable-openct,openct"
|
|
PACKAGECONFIG[pcsc] = "--enable-pcsc,--disable-pcsc,pcsc-lite,pcsc-lite pcsc-lite-lib"
|
|
|
|
RDEPENDS:${PN} = "readline"
|
|
|
|
FILES:${PN} += "\
|
|
${libdir}/opensc-pkcs11.so \
|
|
${libdir}/onepin-opensc-pkcs11.so \
|
|
${libdir}/pkcs11-spy.so \
|
|
"
|
|
FILES:${PN}-dev += "\
|
|
${libdir}/pkcs11/opensc-pkcs11.so \
|
|
${libdir}/pkcs11/onepin-opensc-pkcs11.so \
|
|
${libdir}/pkcs11/pkcs11-spy.so \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native"
|