opensc-devel: Additional files needed for OpenSC development ---------------------------------------------------------------------- File: opensc-devel-0.11.1-22.ppc.rpm Patchrpm: opensc-devel-0.11.1-22.ppc.patch.rpm Version: 0.11.1-22 Size: 412 kB Patchsize: 242 kB Date: Wed 10 Sep 2008 1:26:6 CEST Source: opensc-0.11.1-22.src.rpm Security: Yes ---------------------------------------------------------------------- Description: This update fixes a security issues with opensc that occured when initializing blank smart cards with Siemens CardOS M4. After the initialization anyone could set the PIN of the smart card without authorization (CVE-2008-2235). NOTE: Already initialized cards are still vulnerable after this update. Please use the command-line tool pkcs15-tool with option --test-update and --update when necessary. Please find more information at http://www.opensc-project.org/security.html This is the second attempt to fix this problem. The previous update was unforunately incomplete.