From 0553a6c60ccc5eb74ae67f3a69e7dc3bad648cca Mon Sep 17 00:00:00 2001 From: Michael Adler Date: Wed, 1 Apr 2026 08:14:52 +0200 Subject: [PATCH] opensc: 0.26.1 -> 0.27.1 Many security fixes: CVE-2025-13763: Several uses of potentially uninitialized memory detected by fuzzers CVE-2025-49010: Possible write beyond buffer bounds during processing of GET RESPONSE APDU CVE-2025-66215: Possible write beyond buffer bounds in oberthur driver CVE-2025-66038: Possible read beyond buffer bounds when parsing historical bytes in PIV driver CVE-2025-66037: Possible buffer overrun while parsing SPKI More low-severity data handling issues when parsing profile configuration --- pkgs/by-name/op/opensc/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/op/opensc/package.nix b/pkgs/by-name/op/opensc/package.nix index 8d8d27d337b8..4206d8e002e7 100644 --- a/pkgs/by-name/op/opensc/package.nix +++ b/pkgs/by-name/op/opensc/package.nix @@ -19,13 +19,13 @@ stdenv.mkDerivation (finalAttrs: { pname = "opensc"; - version = "0.26.1"; + version = "0.27.1"; src = fetchFromGitHub { owner = "OpenSC"; repo = "OpenSC"; tag = finalAttrs.version; - hash = "sha256-H5df+x15fz28IlL/G9zPBxbNBzc+BlDmmgNZVEYQgac="; + hash = "sha256-s/3bIhPGa3+SKjMh0CNgsU3nOkhEaxPTpmEbc6VIn3Q="; }; nativeBuildInputs = [