Merge pcsc-lite 1.8.20-1 (main) from Debian testing (main)

Bug #1591547 reported by Amr Ibrahim
260
This bug affects 2 people
Affects Status Importance Assigned to Milestone
pcsc-lite (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Please merge pcsc-lite 1.8.20-1 (main) from Debian testing (main) for bugs and security fixes.
---------------------------------------------------------------------------

1.8.20: Ludovic Rousseau
30 December 2016
- Fix a crash and potential security issue in pcscd

1.8.19: Ludovic Rousseau
9 December 2016
- SCardGetStatusChange(): Fix a (rare) race condition
- Doxygen:
  . SCardGetStatusChange() may return SCARD_E_UNKNOWN_READER
  . SCardConnect() and SCardReconnect() will never return SCARD_E_NOT_READY
- pcsc-spy:
  . fix display of execution time
  . log the thread number in the results
- Some other minor improvements

1.8.18: Ludovic Rousseau
10 August 2016
- SCardDisconnect(): much faster with SCARD_UNPOWER_CARD
- SCardConnect(): Fix a possible duplicated hCard context
- Fix compilation on FreeBSD
- Fix compilation on Solaris
- Some other minor improvements

1.8.17: Ludovic Rousseau
29 May 2016
- Fix SCardEndTransaction() issue with a SCARD_SHARE_EXCLUSIVE connection
- Fix an issue when used with systemd (problem in signal handler)
- SCardGetAttrib(): set pcbAttrLen when buffer is too small
- Doxygen: SCardGetAttrib() pbAttr can be NULL
- Doxygen: SCardGetAttrib() *pcbAttrLen contains the buffer size
- fix compilation warnings and link errors on SunOS
- Some other minor improvements

1.8.16: Ludovic Rousseau
20 March 2016
- SCardCancel() was not correctly handled
  When a SCardGetStatusChange() was cancelled then a next PC/SC call
  after the SCardGetStatusChange() may fail with a strange error code if
  the event waited in SCardGetStatusChange() occurs.
- Doxygen: fix different documentation issues
- SCARD_SCOPE_GLOBAL is now defined in a public header (even if never used)
- Enable Trace and Profile features using compiler flags and without
  modifying the source code
- Some other minor improvements and bug corrections

1.8.15: Ludovic Rousseau
25 December 2015
- Add support of remove and/or customize PC/SC reader names using
  PCSCLITE_FILTER_IGNORE_READER_NAMES and PCSCLITE_FILTER_EXTEND_READER_NAMES
  See http://ludovicrousseau.blogspot.fr/2015/12/remove-andor-customize-pcsc-reader-names.html
- Some other minor improvements and bug corrections
-----------------------------------------------------

Explanation of the Ubuntu delta:
  * Merge new upstream release from Debian Unstable (LP: #1483750).
    - debian/rules: Move runtime libraries to /lib, for the benefit of
      wpasupplicant. (See Debian #531592)

Sorry, my packaging skills are zero, so that I can't work on this merge.
-------------------------------------------------------------------------

Changelog entries since current yakkety version 1.8.14-1ubuntu1:

pcsc-lite (1.8.20-1) unstable; urgency=medium

  * New upstream release

 -- Ludovic Rousseau <email address hidden> Fri, 30 Dec 2016 18:17:58 +0100

pcsc-lite (1.8.19-1) unstable; urgency=medium

  * New upstream release

 -- Ludovic Rousseau <email address hidden> Fri, 09 Dec 2016 10:11:15 +0100

pcsc-lite (1.8.18-1) unstable; urgency=medium

  * New upstream release

 -- Ludovic Rousseau <email address hidden> Wed, 10 Aug 2016 20:56:54 +0200

pcsc-lite (1.8.17-1) unstable; urgency=medium

  * New upstream release
  * debian/control: Standards-Version: 3.9.7 -> 3.9.8. No change needed.

 -- Ludovic Rousseau <email address hidden> Sun, 29 May 2016 17:30:12 +0200

pcsc-lite (1.8.16-1) unstable; urgency=medium

  * New upstream release
  * debian/control: fix lintian warning vcs-field-uses-insecure-uri vcs-browser
    Use https:// instead of http://
  * debian/control: Standards-Version: 3.9.6 -> 3.9.7. No change needed.
  * debian/rules: use "hardening=+all" to harden even more the binaries

 -- Ludovic Rousseau <email address hidden> Sun, 20 Mar 2016 17:28:29 +0100

pcsc-lite (1.8.15-1) unstable; urgency=medium

  * New upstream release

 -- Ludovic Rousseau <email address hidden> Fri, 25 Dec 2015 21:28:30 +0100

CVE References

Revision history for this message
Daniel Holbach (dholbach) wrote :

There is no patch to look at, I'll unsubscribe the ubuntu-sponsors team.

tags: added: needs-debian-merge upgrade-software-version
Revision history for this message
Amr Ibrahim (amribrahim1987) wrote :

Ping!

summary: - Merge pcsc-lite 1.8.17-1 (main) from Debian testing (main)
+ Merge pcsc-lite 1.8.20-1 (main) from Debian testing (main)
description: updated
information type: Public → Public Security
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in pcsc-lite (Ubuntu):
status: New → Confirmed
Revision history for this message
variona (variona) wrote :

A fix that works for me is:
install missing dependencies libudev-dev,libusb-1.0.0-dev
install from source pcsc-lite 1.8.20
install from source ccid 1.4.22

then link /usr/sbin/pcscd to /usr/local/sbin/pcscd so that sysctl starts the newly installed version
`````
cd usr/sbin
ln -sf /usr/local/sbin/pcscd
`````
I had to do this because VMWare-Workstation would die because of:
`````
2017-01-12T09:06:20.366+01:00| usbCCIDEnumCards| I125: USB-CCID: SCardGetStatusChange returned SCARD_E_UNKNOWN_READER(0x80100009)
2017-01-12T09:06:20.366+01:00| usbCCIDEnumCards| I125: USB-CCID: SCardGetStatusChange returned SCARD_E_UNKNOWN_READER(0x80100009)
2017-01-12T09:06:20.366+01:00| usbCCIDEnumCards| I125: USB-CCID: SCardGetStatusChange returned SCARD_E_UNKNOWN_READER(0x80100009)
2017-01-12T09:06:20.366+01:00| usbCCIDEnumCards| I125: USB-CCID: SCardGetStatusChange returned SCARD_E_UNKNOWN_READER(0x80100009)
2017-01-12T09:06:20.366+01:00| usbCCIDEnumCards| I125: USB-CCID: SCardGetStatusChange returned SCARD_E_UNKNOWN_READER(0x80100009)....
`````

Revision history for this message
Amr Ibrahim (amribrahim1987) wrote :

Ping!

Revision history for this message
Jeremy Bícha (jbicha) wrote :
Changed in pcsc-lite (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.