OpenSC 0.26.0

--===============2866179860765698313==
Content-Type: multipart/alternative; boundary="0000000000000cb6150626cae8ed"

--0000000000000cb6150626cae8ed
Content-Type: text/plain; charset="UTF-8"

Hello all,

We are happy to announce the latest release of OpenSC 0.26.0.
You can find the full summary of changes, release tarballs, and binaries
on Github:

https://github.com/OpenSC/OpenSC/releases/tag/0.26.0

From the outstanding changes, the release includes additional fixes
for removing the time side-channel leakage related to RSA PKCS#1 v1.5
padding
removal after decryption, unified OpenSSL logging, several features for
pkcs11-tool
and fixes for CVEs targeting uninitialized memory problems.

For the full changelog, please refer to the NEWS file:
https://github.com/OpenSC/OpenSC/blob/master/NEWS

It is recommended to use the last version (or your distribution's latest
maintained version)
due to published PoC with Kerberos to side-channel leaking while RSA
PKCS#1 v1.5 padding.
Details can be found here:
https://github.com/OpenSC/OpenSC/security/advisories/GHSA-h6ww-xfc2-jw4h

The Windows binaries contain signed installers provided by Signpath.io. The
macOS installer is signed by Tim Wilbrink, as in previous releases. You can
find
SHA-256 hashes of the release artifacts below (calculated with `openssl sha256
$file`):

OpenSC-0.26.0.dmg
8f474d55c8b172167014a246035f38ce427207bf90de06ae6cc837ac37cc269c
OpenSC-0.26.0_win32-Debug.zip
e26b29c121852ddd1ebd5304cd83ccbfa1ac032a00828a1ce452028d58acb6b9
OpenSC-0.26.0_win32-Light-Debug.zip
ec142bda8471f244d5b55d7f837ab96f7c60b6590f7ad3a4d851a29de16a3862
OpenSC-0.26.0_win32-Light.msi
008c2fe08735dfc15c0d2d1c8b1c13450841c885b120d2d80d12ab12abce8469
OpenSC-0.26.0_win32.msi
31f0056b06d710de1e9762e80069c2a1b3adfcff70ad4878b88c6a605dabd9ab
OpenSC-0.26.0_win64-Debug.zip
106a14eb6003d4fcd4e3ef6b6f2ecffc3381741b77cbb6df8d6067ab350a41b3
OpenSC-0.26.0_win64-Light-Debug.zip
40644ad2b4dbe40aedd3edae8790dab343e52010929983f43a75e8dbf117956f
OpenSC-0.26.0_win64-Light.msi
5a630cbfc353f1802d6b711122eafa6e25a8ac8283fd98db42ab48264569eca6
OpenSC-0.26.0_win64.msi
5ebfc1e0094ed8670c11c94a9e7c0decfa25ad71fded638c8cdd427a5d242639
opensc-0.26.0.tar.gz
837baead45e1505260d868871056150ede6e73d35460a470f2595a9e5e75f82b

Best regards,
The OpenSC team

--0000000000000cb6150626cae8ed
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail_default" style=3D"fon=
t-family:arial,sans-serif"><span style=3D"font-family:Arial,Helvetica,sans-=
serif">Hello all,</span><br style=3D"font-family:Arial,Helvetica,sans-serif=
"><br style=3D"font-family:Arial,Helvetica,sans-serif">We are happy to anno=
unce the latest release of OpenSC 0.26.0.<br>You can find the full summary =
of changes, release tarballs, and binaries<br>on Github:</div><div class=3D=
"gmail_default"><br></div><div class=3D"gmail_default"><a href=3D"https://g=
ithub.com/OpenSC/OpenSC/releases/tag/0.26.0" rel=3D"noreferrer" target=3D"_=
blank">https://github.com/OpenSC/OpenSC/releases/tag/0.26.0</a><br style=3D=
"font-family:Arial,Helvetica,sans-serif"><br style=3D"font-family:Arial,Hel=
vetica,sans-serif"><span style=3D"font-family:Arial,Helvetica,sans-serif">F=
rom the outstanding changes, the release includes additional fixes</span><b=
r style=3D"font-family:Arial,Helvetica,sans-serif"><span style=3D"font-fami=
ly:Arial,Helvetica,sans-serif">for removing the time side-channel=C2=A0</sp=
an><span style=3D"font-family:Arial,Helvetica,sans-serif">leakage related t=
o RSA PKCS#1 v1.5 padding</span></div><div class=3D"gmail_default"><span st=
yle=3D"font-family:Arial,Helvetica,sans-serif">removal after decryption,=C2=
=A0</span><span style=3D"font-family:Arial,Helvetica,sans-serif">unified Op=
enSSL logging,=C2=A0</span><span style=3D"font-family:Arial,Helvetica,sans-=
serif">several features for pkcs11-tool</span></div><div class=3D"gmail_def=
ault"><span style=3D"font-family:Arial,Helvetica,sans-serif">and fixes for =
CVEs targeting=C2=A0</span><span style=3D"font-family:Arial,Helvetica,sans-=
serif">uninitialized memory problems.</span><br style=3D"font-family:Arial,=
Helvetica,sans-serif"><br style=3D"font-family:Arial,Helvetica,sans-serif">=
<span style=3D"font-family:Arial,Helvetica,sans-serif">For the full changel=
og, please refer to the NEWS file:</span><br style=3D"font-family:Arial,Hel=
vetica,sans-serif"><a href=3D"https://github.com/OpenSC/OpenSC/blob/master/=
NEWS" rel=3D"noreferrer" style=3D"font-family:Arial,Helvetica,sans-serif" t=
arget=3D"_blank">https://github.com/OpenSC/OpenSC/blob/master/NEWS</a><br s=
tyle=3D"font-family:Arial,Helvetica,sans-serif"><br style=3D"font-family:Ar=
ial,Helvetica,sans-serif"><span style=3D"font-family:Arial,Helvetica,sans-s=
erif">It is recommended to use the last version (or your=C2=A0</span><span =
style=3D"font-family:Arial,Helvetica,sans-serif">distribution&#39;s latest =
maintained version)</span><br style=3D"font-family:Arial,Helvetica,sans-ser=
if"><span style=3D"font-family:Arial,Helvetica,sans-serif">due to published=
 PoC with Kerberos to side-channel leaking while RSA</span><br style=3D"fon=
t-family:Arial,Helvetica,sans-serif"><span style=3D"font-family:Arial,Helve=
tica,sans-serif">PKCS#1 v1.5 padding.</span><br style=3D"font-family:Arial,=
Helvetica,sans-serif"><span style=3D"font-family:Arial,Helvetica,sans-serif=
">Details can be found here:</span><br style=3D"font-family:Arial,Helvetica=
,sans-serif"><a href=3D"https://github.com/OpenSC/OpenSC/security/advisorie=
s/GHSA-h6ww-xfc2-jw4h" rel=3D"noreferrer" style=3D"font-family:Arial,Helvet=
ica,sans-serif" target=3D"_blank">https://github.com/OpenSC/OpenSC/security=
/advisories/GHSA-h6ww-xfc2-jw4h</a></div><div class=3D"gmail_default"><font=
 face=3D"arial, sans-serif"><br></font><span style=3D"font-family:Arial,Hel=
vetica,sans-serif">The Windows binaries contain signed installers provided =
by Signpath.io. The</span><br style=3D"font-family:Arial,Helvetica,sans-ser=
if"><span style=3D"font-family:Arial,Helvetica,sans-serif">macOS=C2=A0</spa=
n><span style=3D"font-family:Arial,Helvetica,sans-serif">installer is signe=
d by Tim Wilbrink, as in previous releases. You can find</span><br style=3D=
"font-family:Arial,Helvetica,sans-serif"><span style=3D"font-family:Arial,H=
elvetica,sans-serif">SHA-256 hashes of the release artifacts below (calcula=
ted with `openssl=C2=A0</span><span style=3D"font-family:Arial,Helvetica,sa=
ns-serif">sha256 $file`):</span><br style=3D"font-family:Arial,Helvetica,sa=
ns-serif"><br style=3D"font-family:Arial,Helvetica,sans-serif"><span style=
=3D"font-family:Arial,Helvetica,sans-serif">OpenSC-0.26.0.dmg</span></div><=
div class=3D"gmail_default" style=3D"font-family:arial,sans-serif">8f474d55=
c8b172167014a246035f38ce427207bf90de06ae6cc837ac37cc269c</div><div class=3D=
"gmail_default" style=3D"font-family:arial,sans-serif">OpenSC-0.26.0_win32-=
Debug.zip</div><div class=3D"gmail_default" style=3D"">e26b29c121852ddd1ebd=
5304cd83ccbfa1ac032a00828a1ce452028d58acb6b9<font face=3D"arial, sans-serif=
"><br style=3D""></font><span style=3D"font-family:Arial,Helvetica,sans-ser=
if">OpenSC-0.26.0_win32-Light-</span><span style=3D"font-family:Arial,Helve=
tica,sans-serif">Debug.zip</span></div><div class=3D"gmail_default" style=
=3D"font-family:arial,sans-serif">ec142bda8471f244d5b55d7f837ab96f7c60b6590=
f7ad3a4d851a29de16a3862<br style=3D"font-family:Arial,Helvetica,sans-serif"=
><span style=3D"font-family:Arial,Helvetica,sans-serif">OpenSC-0.26.0_win32=
-Light.</span><span style=3D"font-family:Arial,Helvetica,sans-serif">msi</s=
pan></div><div class=3D"gmail_default" style=3D"font-family:arial,sans-seri=
f">008c2fe08735dfc15c0d2d1c8b1c13450841c885b120d2d80d12ab12abce8469<br styl=
e=3D"font-family:Arial,Helvetica,sans-serif"><span style=3D"font-family:Ari=
al,Helvetica,sans-serif">OpenSC-0.26.0_win32.msi</span></div><div class=3D"=
gmail_default" style=3D"font-family:arial,sans-serif">31f0056b06d710de1e976=
2e80069c2a1b3adfcff70ad4878b88c6a605dabd9ab<br style=3D"font-family:Arial,H=
elvetica,sans-serif"><span style=3D"font-family:Arial,Helvetica,sans-serif"=
>OpenSC-0.26.0_win64-Debug.</span><span style=3D"font-family:Arial,Helvetic=
a,sans-serif">zip</span></div><div class=3D"gmail_default" style=3D"font-fa=
mily:arial,sans-serif">106a14eb6003d4fcd4e3ef6b6f2ecffc3381741b77cbb6df8d60=
67ab350a41b3<br style=3D"font-family:Arial,Helvetica,sans-serif"><span styl=
e=3D"font-family:Arial,Helvetica,sans-serif">OpenSC-0.26.0_win64-Light-</sp=
an><span style=3D"font-family:Arial,Helvetica,sans-serif">Debug.zip</span><=
/div><div class=3D"gmail_default" style=3D"font-family:arial,sans-serif">40=
644ad2b4dbe40aedd3edae8790dab343e52010929983f43a75e8dbf117956f<br style=3D"=
font-family:Arial,Helvetica,sans-serif"><span style=3D"font-family:Arial,He=
lvetica,sans-serif">OpenSC-0.26.0_win64-Light.</span><span style=3D"font-fa=
mily:Arial,Helvetica,sans-serif">msi</span></div><div class=3D"gmail_defaul=
t" style=3D"font-family:arial,sans-serif">5a630cbfc353f1802d6b711122eafa6e2=
5a8ac8283fd98db42ab48264569eca6<br style=3D"font-family:Arial,Helvetica,san=
s-serif"><span style=3D"font-family:Arial,Helvetica,sans-serif">OpenSC-0.26=
.0_win64.msi</span></div><div class=3D"gmail_default" style=3D"font-family:=
arial,sans-serif">5ebfc1e0094ed8670c11c94a9e7c0decfa25ad71fded638c8cdd427a5=
d242639<br style=3D"font-family:Arial,Helvetica,sans-serif"><span style=3D"=
font-family:Arial,Helvetica,sans-serif">opensc-0.26.0.tar.gz</span></div><d=
iv class=3D"gmail_default" style=3D"font-family:arial,sans-serif">837baead4=
5e1505260d868871056150ede6e73d35460a470f2595a9e5e75f82b<br style=3D"font-fa=
mily:Arial,Helvetica,sans-serif"><br style=3D"font-family:Arial,Helvetica,s=
ans-serif"><span style=3D"font-family:Arial,Helvetica,sans-serif">Best rega=
rds,</span><br style=3D"font-family:Arial,Helvetica,sans-serif"><span style=
=3D"font-family:Arial,Helvetica,sans-serif">The OpenSC team</span><br style=
=3D"font-family:Arial,Helvetica,sans-serif"></div></div>
</div>

--0000000000000cb6150626cae8ed--



--===============2866179860765698313==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============2866179860765698313==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Opensc-announce mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensc-announce

--===============2866179860765698313==--