mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-09-16 12:15:52 +00:00
c028b36527
CVE-2024-45620: A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2024-45620] Upstream patches: [a1bcc6516f] [6baa195965] [468a314d76] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
96 lines
3.5 KiB
BlitzBasic
96 lines
3.5 KiB
BlitzBasic
SUMMARY = "Smart card library and applications"
|
|
DESCRIPTION = "OpenSC is a tool for accessing smart card devices. Basic\
|
|
functionality (e.g. SELECT FILE, READ BINARY) should work on any ISO\
|
|
7816-4 compatible smart card. Encryption and decryption using private\
|
|
keys on the smart card is possible with PKCS\
|
|
such as the FINEID (Finnish Electronic IDentity) card. Swedish Posten\
|
|
eID cards have also been confirmed to work."
|
|
|
|
HOMEPAGE = "http://www.opensc-project.org/opensc/"
|
|
SECTION = "System Environment/Libraries"
|
|
LICENSE = "LGPL-2.1-or-later"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=cb8aedd3bced19bd8026d96a8b6876d7"
|
|
|
|
#v0.21.0
|
|
SRCREV = "c902e1992195e00ada12d71beb1029287cd72037"
|
|
SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https \
|
|
file://CVE-2023-2977.patch \
|
|
file://CVE-2023-40660.patch \
|
|
file://CVE-2023-40661-1.patch \
|
|
file://CVE-2023-40661-2.patch \
|
|
file://CVE-2023-40661-3.patch \
|
|
file://CVE-2023-40661-4.patch \
|
|
file://CVE-2023-40661-5.patch \
|
|
file://CVE-2023-40661-6.patch \
|
|
file://CVE-2023-40661-7.patch \
|
|
file://CVE-2024-1454.patch \
|
|
file://CVE-2024-8443-0001.patch \
|
|
file://CVE-2024-8443-0002.patch \
|
|
file://CVE-2024-45615-0001.patch \
|
|
file://CVE-2024-45615-0002.patch \
|
|
file://CVE-2024-45615-0003.patch \
|
|
file://CVE-2024-45615-0004.patch \
|
|
file://CVE-2024-45615-0005.patch \
|
|
file://CVE-2024-45616-0001.patch \
|
|
file://CVE-2024-45616-0002.patch \
|
|
file://CVE-2024-45616-0003.patch \
|
|
file://CVE-2024-45616-0004.patch \
|
|
file://CVE-2024-45616-0005.patch \
|
|
file://CVE-2024-45616-0006.patch \
|
|
file://CVE-2024-45616-0007.patch \
|
|
file://CVE-2024-45616-0008.patch \
|
|
file://CVE-2024-45616-0009.patch \
|
|
file://CVE-2024-45616-0010.patch \
|
|
file://CVE-2024-45617-0001.patch \
|
|
file://CVE-2024-45617-0002.patch \
|
|
file://CVE-2024-45617-0003.patch \
|
|
file://CVE-2024-45618-0001.patch \
|
|
file://CVE-2024-45618-0002.patch \
|
|
file://CVE-2024-45619-0001.patch \
|
|
file://CVE-2024-45619-0002.patch \
|
|
file://CVE-2024-45619-0003.patch \
|
|
file://CVE-2024-45619-0004.patch \
|
|
file://CVE-2024-45619-0005.patch \
|
|
file://CVE-2024-45619-0006.patch \
|
|
file://CVE-2024-45620-0001.patch \
|
|
file://CVE-2024-45620-0002.patch \
|
|
file://CVE-2024-45620-0003.patch \
|
|
"
|
|
|
|
# CVE-2021-34193 is a duplicate CVE covering the 5 individual
|
|
# https://github.com/OpenSC/OpenSC/pull/2855/commits/7a049fc3922060fb75cb9fea9e58eef9edc357ae
|
|
CVE_CHECK_IGNORE += "CVE-2021-34193"
|
|
|
|
DEPENDS = "virtual/libiconv openssl"
|
|
|
|
S = "${WORKDIR}/git"
|
|
inherit autotools pkgconfig bash-completion
|
|
|
|
EXTRA_OECONF = " \
|
|
--disable-static \
|
|
--disable-ctapi \
|
|
--disable-doc \
|
|
--disable-strict \
|
|
"
|
|
EXTRA_OEMAKE = "DESTDIR=${D}"
|
|
|
|
PACKAGECONFIG ??= "pcsc"
|
|
|
|
PACKAGECONFIG[openct] = "--enable-openct,--disable-openct,openct"
|
|
PACKAGECONFIG[pcsc] = "--enable-pcsc,--disable-pcsc,pcsc-lite,pcsc-lite pcsc-lite-lib"
|
|
|
|
RDEPENDS:${PN} = "readline"
|
|
|
|
FILES:${PN} += "\
|
|
${libdir}/opensc-pkcs11.so \
|
|
${libdir}/onepin-opensc-pkcs11.so \
|
|
${libdir}/pkcs11-spy.so \
|
|
"
|
|
FILES:${PN}-dev += "\
|
|
${libdir}/pkcs11/opensc-pkcs11.so \
|
|
${libdir}/pkcs11/onepin-opensc-pkcs11.so \
|
|
${libdir}/pkcs11/pkcs11-spy.so \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native"
|