opensc: update to 0.27.1
authorDaniel Golle <redacted>
Fri, 8 May 2026 17:42:46 +0000 (18:42 +0100)
committerDaniel Golle <redacted>
Tue, 12 May 2026 15:18:56 +0000 (16:18 +0100)
0.27.0 includes a number of CVE fixes and many improvements:

Security fixes (0.27.0):
 * CVE-2025-13763: Uninitialized memory uses detected by fuzzers
 * CVE-2025-49010: Write beyond buffer bounds in GET RESPONSE APDU
 * CVE-2025-66215: Write beyond buffer bounds in oberthur driver
 * CVE-2025-66038: Read beyond buffer bounds in PIV historical bytes
 * CVE-2025-66037: Buffer overrun while parsing SPKI

General improvements:
 * Added support for PKCS#11 3.2 in tools and pkcs11-spy/p11test
 * Added support for Ed448, X448 mechanisms; improved Edwards and
   Montgomery key support.
 * Support CKA_PUBKEY_KEY_INFO PKCS#11 attribute.
 * Remove obsolete tokend support.
 * Correctly detect OS-level FIPS mode in OpenSSL automatically.
 * Added support for Brainpool twisted curves.
 * EsteID: EstEID 2025, FinEID 4.0/4.1, Latvian IDEMIA Cosmo X & 8.2.
 * D-Trust Card 5.1 & 5.4 with PIN change/unblock.
 * Belpic: support for belpic applet version 1.8.
 * Many other card-specific improvements (OpenPGP, PIV, ...).

0.27.1 is a bug-fix release for infrastructure issues.

Link: https://github.com/OpenSC/OpenSC/blob/0.27.1/NEWS
Signed-off-by: Daniel Golle <redacted>
utils/opensc/Makefile

index fff3571e04176bb526579f70b006b41cfe410288..46bfc64c80ff57ee0ad851355ad4ea33305aba12 100644 (file)
@@ -8,9 +8,9 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=opensc
-PKG_VERSION:=0.26.1
+PKG_VERSION:=0.27.1
 PKG_RELEASE:=1
-PKG_HASH:=f16291a031d86e570394762e9f35eaf2fcbc2337a49910f3feae42d54e1688cb
+PKG_HASH:=976f4a23eaf3397a1a2c3a7aac80bf971a8c3d829c9a79f06145bfaeeae5eca7
 
 PKG_LICENSE:=LGPL-2.1-or-later
 PKG_LICENSE_FILES:=COPYING
git clone https://git.99rst.org/PROJECT