Format: 1.8 Date: Fri, 09 Jul 2010 13:55:29 -0400 Source: opensc Binary: opensc libopensc2-dev libopensc2 libopensc2-dbg mozilla-opensc Architecture: amd64 Version: 0.11.4-5ubuntu1.1 Distribution: jaunty Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Brian Thomason Description: libopensc2 - SmartCard library with support for PKCS#15 compatible smart cards libopensc2-dbg - debugging symbols for libopensc2 libopensc2-dev - OpenSC development files mozilla-opensc - Mozilla plugin for authentication using OpenSC opensc - SmartCard utilities with support for PKCS#15 compatible cards Launchpad-Bugs-Fixed: 603703 Changes: opensc (0.11.4-5ubuntu1.1) jaunty-security; urgency=low . * SECURITY UPDATE: Fix insecure profile handling (LP: #603703) - modified src/pkcs15init/asepcos.profile, src/pkcs15init/cardos.profile, src/pkcs15init/cyberflex.profile, src/pkcs15init/flex.profile, src/pkcs15init/gpk.profile, src/pkcs15init/incrypto34.profile, src/pkcs15init/jcop.profile, src/pkcs15init/muscle.profile, src/pkcs15init/pkcs15-lib.c, src/pkcs15init/starcos.profile: Backport fix from upstream svn#3605. Fixes improper handling of private data in profiles - modified etc/opensc.conf.in, src/pkcs11/misc.c: Change the defaults of lock_login and soft_keygen_allowed to prevent untrusted applications from using the smartcard and preventing unexpected client side key generation. Patches provided by Debian in Lenny (DSA-1734-1) - CVE-2009-0368 Checksums-Sha1: d3ee241b75d5b9d96dea3c1a4469dfbbca1a167d 251474 opensc_0.11.4-5ubuntu1.1_amd64.deb 9f7fd3c448621ef506dbe0c6a41b05b344f10df7 1102406 libopensc2-dev_0.11.4-5ubuntu1.1_amd64.deb c0aeb3fd4248a56596ea95824c97a7b86137a7a3 602686 libopensc2_0.11.4-5ubuntu1.1_amd64.deb 214ce8c29d94841af3b15ddc8c6e61e9de93141b 1199072 libopensc2-dbg_0.11.4-5ubuntu1.1_amd64.deb 8d9831acf438e53f47bb4cf577d74709bad384da 34368 mozilla-opensc_0.11.4-5ubuntu1.1_amd64.deb Checksums-Sha256: 048b10ca4c6dd345382d1ac0a382f151e4a691b988805fdc631efae5c58e7280 251474 opensc_0.11.4-5ubuntu1.1_amd64.deb dcd371589fe4d27d4960e678a5e7cf3454ee19ce6a3f2c15e40cfed509578378 1102406 libopensc2-dev_0.11.4-5ubuntu1.1_amd64.deb efac64dd78a7311ae093f406159de70c3a0f5c8f99a78d5305731ab5244f9022 602686 libopensc2_0.11.4-5ubuntu1.1_amd64.deb 2456fba97666d4fca0c9755a86c9c6722f962797cc7bc32dee861eab5f082200 1199072 libopensc2-dbg_0.11.4-5ubuntu1.1_amd64.deb 47561a8b90087aead3730d4057155137181614c006b096c21e87894e93f4ec8f 34368 mozilla-opensc_0.11.4-5ubuntu1.1_amd64.deb Files: c1137a8737676d98e5b9e81e408aa2ea 251474 utils extra opensc_0.11.4-5ubuntu1.1_amd64.deb 09d36c193aa9feabeff5b997ac1b4969 1102406 libdevel optional libopensc2-dev_0.11.4-5ubuntu1.1_amd64.deb 3592717809965bd1cad75ba1d45ecc71 602686 libs optional libopensc2_0.11.4-5ubuntu1.1_amd64.deb a80f98060bd94fb75dc2903b91ac59c7 1199072 devel extra libopensc2-dbg_0.11.4-5ubuntu1.1_amd64.deb 1b67cba3b02460d78da8abe268844a85 34368 web extra mozilla-opensc_0.11.4-5ubuntu1.1_amd64.deb Original-Maintainer: Eric Dorland