Accepted opensc 0.11.4-5+lenny1 (source amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 28 Feb 2009 18:33:41 -0500
Source: opensc
Binary: opensc libopensc2-dev libopensc2 libopensc2-dbg mozilla-opensc
Architecture: source amd64
Version: 0.11.4-5+lenny1
Distribution: stable-security
Urgency: critical
Maintainer: Eric Dorland <eric@debian.org>
Changed-By: Eric Dorland <eric@debian.org>
Description:
libopensc2 - SmartCard library with support for PKCS#15 compatible smart cards
libopensc2-dbg - debugging symbols for libopensc2
libopensc2-dev - OpenSC development files
mozilla-opensc - Mozilla plugin for authentication using OpenSC
opensc - SmartCard utilities with support for PKCS#15 compatible cards
Changes:
opensc (0.11.4-5+lenny1) stable-security; urgency=critical
.
* src/pkcs15init/asepcos.profile, src/pkcs15init/cardos.profile,
src/pkcs15init/cyberflex.profile, src/pkcs15init/flex.profile,
src/pkcs15init/gpk.profile, src/pkcs15init/incrypto34.profile,
src/pkcs15init/jcop.profile, src/pkcs15init/muscle.profile,
src/pkcs15init/pkcs15-lib.c, src/pkcs15init/starcos.profile: Backport
fix from svn#3605 for CVE-2009-0368: "OpenSC stores private data
without proper access restrictions."
* etc/opensc.conf.in, src/pkcs11/misc.c: Change the defaults of
lock_login and soft_keygen_allowed to prevent untrusted applications
from using the smartcard and preventing unexpected client side key
generation.
* debian/opensc.NEWS: Add a note about old data objects not being safe.
Checksums-Sha1:
897db1110b3f58dd5ae9c92bb357c9af6e8cd7de 1333 opensc_0.11.4-5+lenny1.dsc
2a871e0817e9ff605217d48052d77976aee89530 1410650 opensc_0.11.4.orig.tar.gz
ffb5cfe01158deefb1e05c2c841360560a4905fb 59733 opensc_0.11.4-5+lenny1.diff.gz
3e37ea902fa9307debb663692e5c651b02c5b4ad 385876 opensc_0.11.4-5+lenny1_amd64.deb
031cfe74bc28c4933173016d522e732f9ce2e4b9 1220570 libopensc2-dev_0.11.4-5+lenny1_amd64.deb
f10aa8985be4ac5e8b26bc6f58148c7bc58c43a5 600140 libopensc2_0.11.4-5+lenny1_amd64.deb
7061461144ec6eb362df6006b7be8c153086d796 1250976 libopensc2-dbg_0.11.4-5+lenny1_amd64.deb
b1eacef2f84b3a3da49e03cef1f9827cfcd253b8 170424 mozilla-opensc_0.11.4-5+lenny1_amd64.deb
Checksums-Sha256:
597e442f820a9784ce002427853f10d93fa053b37bbd00dd46b515ad0eccd3c9 1333 opensc_0.11.4-5+lenny1.dsc
8534e82dd53208c82a29961455f29d8f3b6350fa2be721e537463d8f6f9d6164 1410650 opensc_0.11.4.orig.tar.gz
f779a2b05e5838cda211dffbaaa27f16ffc5cbf218786e772b762741bedfa6e5 59733 opensc_0.11.4-5+lenny1.diff.gz
fcd9e8f6a422f0fd5153bb97a0e16d4889786ba5ac4b4ea05e9a56f402192b0b 385876 opensc_0.11.4-5+lenny1_amd64.deb
b3b99779db17eee4819b6d94c18dcf6937aaffcf7c09004d21cfbc67b0fae679 1220570 libopensc2-dev_0.11.4-5+lenny1_amd64.deb
4fc7464f80be02aefae8456c2bce8b57824e41f4beffd5b422af057ae8715416 600140 libopensc2_0.11.4-5+lenny1_amd64.deb
d252fa55de9974e6b4c9c05e68f60e6b36eaa41302717ec65c69f16ad4d76e36 1250976 libopensc2-dbg_0.11.4-5+lenny1_amd64.deb
16d3358b2e9f9f152c27717be61051c981450a91a847dedfe9ba0e28ac14f5e4 170424 mozilla-opensc_0.11.4-5+lenny1_amd64.deb
Files:
a6a3c786d70bba230912db8550321b74 1333 utils extra opensc_0.11.4-5+lenny1.dsc
2031aa617be609d50d014d5d370bb8a2 1410650 utils extra opensc_0.11.4.orig.tar.gz
5c19aa261ca11caeb9b46defe3a31754 59733 utils extra opensc_0.11.4-5+lenny1.diff.gz
e82572802a8f5297d4b231510d66a703 385876 utils extra opensc_0.11.4-5+lenny1_amd64.deb
9fac7d931102a13759ff27ca3e63886f 1220570 libdevel optional libopensc2-dev_0.11.4-5+lenny1_amd64.deb
b426f75de39097f951edbb6beb267faf 600140 libs optional libopensc2_0.11.4-5+lenny1_amd64.deb
348819662c1e6d0f856468f57f963bef 1250976 devel extra libopensc2-dbg_0.11.4-5+lenny1_amd64.deb
797bf32516f3c8bf2784a40b3ea4b69b 170424 web extra mozilla-opensc_0.11.4-5+lenny1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFJq5p7YemOzxbZcMYRAo/XAJ4ineNESPCO1TtxHSwasqyv+rlICwCbBAIx
H7UcCF0j/VgYBGJsqSEez34=
=aX93
-----END PGP SIGNATURE-----
Accepted:
libopensc2-dbg_0.11.4-5+lenny1_amd64.deb
to pool/main/o/opensc/libopensc2-dbg_0.11.4-5+lenny1_amd64.deb
libopensc2-dev_0.11.4-5+lenny1_amd64.deb
to pool/main/o/opensc/libopensc2-dev_0.11.4-5+lenny1_amd64.deb
libopensc2_0.11.4-5+lenny1_amd64.deb
to pool/main/o/opensc/libopensc2_0.11.4-5+lenny1_amd64.deb
mozilla-opensc_0.11.4-5+lenny1_amd64.deb
to pool/main/o/opensc/mozilla-opensc_0.11.4-5+lenny1_amd64.deb
opensc_0.11.4-5+lenny1.diff.gz
to pool/main/o/opensc/opensc_0.11.4-5+lenny1.diff.gz
opensc_0.11.4-5+lenny1.dsc
to pool/main/o/opensc/opensc_0.11.4-5+lenny1.dsc
opensc_0.11.4-5+lenny1_amd64.deb
to pool/main/o/opensc/opensc_0.11.4-5+lenny1_amd64.deb
Reply to: