opensc (0.11.4-5+lenny1.1) stable; urgency=high

  * Non-maintainer upload.
  * CVE-2010-4523: Protect against buffer overflow from rogue cards 
    (closes: #607427)

 -- Jonathan Wiltshire <jmw@debian.org>  Wed, 22 Dec 2010 15:32:16 +0000

opensc (0.11.4-5+lenny1) stable-security; urgency=critical

  * src/pkcs15init/asepcos.profile, src/pkcs15init/cardos.profile,
    src/pkcs15init/cyberflex.profile, src/pkcs15init/flex.profile,
    src/pkcs15init/gpk.profile, src/pkcs15init/incrypto34.profile,
    src/pkcs15init/jcop.profile, src/pkcs15init/muscle.profile,
    src/pkcs15init/pkcs15-lib.c, src/pkcs15init/starcos.profile: Backport
    fix from svn#3605 for CVE-2009-0368: "OpenSC stores private data
    without proper access restrictions."
  * etc/opensc.conf.in, src/pkcs11/misc.c: Change the defaults of
    lock_login and soft_keygen_allowed to prevent untrusted applications
    from using the smartcard and preventing unexpected client side key
    generation.
  * debian/opensc.NEWS: Add a note about old data objects not being safe.

 -- Eric Dorland <eric@debian.org>  Sat, 28 Feb 2009 18:33:41 -0500

opensc (0.11.4-5) unstable; urgency=high

  * src/tools/pkcs15-tool.c: Small fix to the previous security
    vulnerability to remove a strict check for the default card label.

 -- Eric Dorland <eric@debian.org>  Fri, 29 Aug 2008 03:14:53 -0400

opensc (0.11.4-4) unstable; urgency=high

  * src/libopensc/card-cardos.c, src/tools/pkcs15-tool.c: Patch to fix
    CVE-2008-2235 "OpenSC initializes CardOS cards with improper 
    access rights".
  * debian/control: Up Standards-Version to 3.7.3.
  * debian/opensc.NEWS: Fix typo.

 -- Eric Dorland <eric@debian.org>  Thu, 31 Jul 2008 13:27:31 -0400

opensc (0.11.4-3) unstable; urgency=low

  * etc/opensc.conf.in: Document that lock_login is actually set to false
    by default. Thanks Mark Proehl. (Closes: #457322)
  * debian/mozilla-opensc.install: Don't install .a file. (Closes: #459542)

 -- Eric Dorland <eric@debian.org>  Mon, 07 Jan 2008 23:54:18 -0500

opensc (0.11.4-2) unstable; urgency=low

  * debian/libopensc2.install: Install onepin-opensc-pkcs11 signer. Thanks
    Laurent Bigonville. (Closes: #449219)
  * debian/libopensc2-dev.install: Install all the .a files.
  * debian/control: Remove XS- prefix from Vcs headers.

 -- Eric Dorland <eric@debian.org>  Sun, 04 Nov 2007 18:04:34 -0500

opensc (0.11.4-1) unstable; urgency=low

  * New upstream release.
  * src/signer/dialog.c: Remove spurious redefinition of PIN_ENTRY.
  * debian/control: Add Hompage and XS-Vcs-* headers.

 -- Eric Dorland <eric@debian.org>  Sat, 22 Sep 2007 04:13:54 -0400

opensc (0.11.3-1) unstable; urgency=low

  * New upstream release. (Closes: #424013)
  * debian/control:
    - Use Standards-Version 3.7.2.2.
    - Use binary:Version instead of Source-Version.

 -- Eric Dorland <eric@debian.org>  Sat, 21 Jul 2007 01:12:13 -0400

opensc (0.11.2-1) unstable; urgency=low

  * New upstream release. (Closes: #413470, #410195, #419680)

 -- Eric Dorland <eric@debian.org>  Thu, 17 May 2007 00:44:04 -0400

opensc (0.11.1-3) unstable; urgency=high

  * src/signer/dialog.c, debian/control: Fix path to pinentry and
    recommend pinentry for mozilla-opensc. Thanks Antti S. Lankila for the
    suggestion. (Closes: #392241)
  * opensc.docs: Install new and improved html docs. (Closes: #399838)
  * mozilla-opensc.links: Install links for iceweasel and iceape rather
    than firefox and mozilla. Considering who I am I should have picked up
    on this sooner. (Closes: #409946)
  * etc/opensc.conf.in: Document that lock_login is actually true by
    default. Thanks Antti-Juhani Kaijanaho. (Closes: #410024)

 -- Eric Dorland <eric@debian.org>  Sat, 10 Feb 2007 23:27:03 -0500

opensc (0.11.1-2) unstable; urgency=low

  * debian/libopensc2.links: Link /usr/lib/opensc/opensc-pkcs11.so to
    /usr/lib/opensc-pkcs11.so to help with upgrades. (Closes: #363443)
  * etc/opensc.conf.in: Fix small typo, thanks Clemens Orthacker.

 -- Eric Dorland <eric@debian.org>  Sat, 19 Aug 2006 13:25:31 -0400

opensc (0.11.1-1) unstable; urgency=low

  * New upstream release.

 -- Eric Dorland <eric@debian.org>  Sat, 10 Jun 2006 01:22:46 -0400

opensc (0.11.0-1) unstable; urgency=low

  * New upstream release. (Closes: #366313)
  * debian/control: 
    - Fix stray 2 in the description. Thanks Ludovic Rousseau. 
      (Closes: #354744)
    - Standards-Version to 3.7.2.0.
    - Add libopensc2-dbg package.
    - Upgrade debhelper dependency to >> 5, for more sane -dbg package 
      handling.
  * debian/watch: Add watch file.
  * man/pkcs15-tool.1: Patch from Daniel Kahn Gillmor to add --unblock-pin
    documentation to the man page. (Closes: #350634)
  * debian/rules: Strip into the -dbg package.
  * debian/compat: Use debhelper level 5.
  * debian/openct.install: 
    - There isn't anything in /usr/sbin anymore.
    - Install new tools and their manpages. 
    - No more section 7 manpages. 
  * debian/libopensc2.shlibs: Add dependency on latest version.
  * debian/libopensc2.install: Don't try to install non-existant .profile
    files in /etc.
  * debian/mozilla-opensc.install, debian/mozilla-opensc.links: Fix path
    to signer.

 -- Eric Dorland <eric@debian.org>  Sun, 28 May 2006 18:28:03 -0400

opensc (0.10.1-1) unstable; urgency=low

  * New upstream release.
  * debian/opensc.NEWS: Add a note about the package split.

 -- Eric Dorland <eric@debian.org>  Wed, 11 Jan 2006 01:44:11 -0500

opensc (0.10.0-2) unstable; urgency=low

  * debian/libopensc2-dev.install: Only install lib*.so, etc, not
    *.so. (Closes: #344591)

 -- Eric Dorland <eric@debian.org>  Fri, 23 Dec 2005 18:38:46 -0500

opensc (0.10.0-1) unstable; urgency=low

  * New upstream release.
  * debian/control:
    - Remove libpam-opensc, libscam1 and libopensc-openssl.
    - Remove gcc-3.3, libpam and libldap build dependencies.
    - Bump soname part of library names, and add appropriate Conflicts 
      and Replaces.
    - Build depend on libltdl3-dev.
    - Bump Standards-Version to 3.6.2.1.
  * debian/libopensc-openssl.install, debian/libpam-opensc.docs,
    debian/libpam-opensc.install, debian/libscam1.examples,
    debian/libscam1.install, debian/libscam1.shlibs, debian/scldap.conf:
    Remove.
  * debian/libopensc1*: Renamed to libopensc2*.
  * debian/libopensc2.shlibs: Remove libpkcs11, bump other version info.
  * debian/libopensc2.install: New location for spy and pkcs11 modules.
  * debian/libopensc2-dev.install: Use *.so, *.la and *.a instead of
    individual listing.
  * debian/rules: 
    - Try building with default gcc.
    - Add new upstream changelog location.
  * debian/copyright: UTF8ify.
  * debian/opensc.docs: Install new tools doc. 
  * debian/libopensc2-dev.docs: New file, install api HTML doc.
  * debian/mozilla-opensc.install: Don't install /usr/lib/mozilla.
  * debian/mozilla-opensc.links: Install to new firefox location and make
    a link for mozilla plugin dir.

 -- Eric Dorland <eric@debian.org>  Wed, 21 Dec 2005 01:21:34 -0500

opensc (0.9.6-3) unstable; urgency=medium

  * debian/control, debian/rules: Use gcc-3.3 instead of default gcc-4.0
    until #322145 can be figured out. 

 -- Eric Dorland <eric@debian.org>  Wed, 31 Aug 2005 01:23:34 -0400

opensc (0.9.6-2) unstable; urgency=low

  * The "RTFM" release.
  * debian/opensc.install: Add manpages for pkcs11-tool and
    cardos-info. (Closes: #289751)
  * docs/pkcs15-init.1: Add documentation for -T switch. (Closes: #317414)
  * debian/opensc.docs: Install HTML and XML documentation. (Closes:
    #318312)

 -- Eric Dorland <eric@debian.org>  Fri, 29 Jul 2005 17:39:31 -0400

opensc (0.9.6-1) unstable; urgency=medium

  * New upstream release, needs to go in with new openct.
  * debian/control: Build-Depend on new libopenct1.
  * debian/libopensc1.install: Install etc/opensc.conf instead of our old
    empty version, because profile_dir must be set now.
  * debian/opensc.conf: Delete, we don't need it anymore.
  * debian/libopensc1.examples: Install a copy of the config file (without
    the example suffix) as an example.
  * debian/libopensc1.shlibs, debian/libscam1.shlibs: Update versions.
  * debian/libscam1.examples: Remove .example suffix.

 -- Eric Dorland <eric@debian.org>  Tue, 26 Apr 2005 01:16:16 -0400

opensc (0.9.4-9) unstable; urgency=high

  * debian/control: Remove extraneous build dependencies on libsasl,
    and tighten X dependency. (Closes: #304975)
  * debian/control: Remove uneccessarily tight dependency on libscam by
    libpam-opensc.

 -- Eric Dorland <eric@debian.org>  Sun, 17 Apr 2005 00:59:57 -0400

opensc (0.9.4-8) unstable; urgency=high

  * Still yearning for testing.
  * debian/libopensc1.examples, debian/libscam1.examples: Install example
    configuration files. (Closes: #286629)
  * debian/rules: Have config files under /etc/opensc.
  * debian/opensc.conf, debian/scldap.conf: Added barren config files that
    tell you to look at the examples.
  * debian/libopensc1.install, debian/libscam1.install: Install config
    files.
  * src/pam/pam_support.c: Fix compile problem under gcc-4.0. Thanks
    Andreas Jochens. (Closes: #287877)

 -- Eric Dorland <eric@debian.org>  Fri, 31 Dec 2004 21:42:53 -0500

opensc (0.9.4-7) unstable; urgency=high

  * Urgency high because the new openct is in testing and the borked s390
    buildd is the only thing holding it back. 
  * src/tools/pkcs11-tool.c: Apply by hand patch from Ph. Marek to fix bad
    --help documentation. (Closes: #284605)
  * debian/mozilla-opensc.links: Added, add link for mozilla-firefox
    plugins.

 -- Eric Dorland <eric@debian.org>  Tue,  7 Dec 2004 22:09:28 -0500

opensc (0.9.4-6) unstable; urgency=medium

  * The "I really need to pay more attention" release.
  * debian/libopensc-openssl.install: Install only the engine files, not
    the signer.
  * debian/control: Have mozilla-opensc replace libopensc-openssl. 

 -- Eric Dorland <eric@debian.org>  Sat, 27 Nov 2004 14:46:40 -0500

opensc (0.9.4-5) unstable; urgency=medium

  * debian/libscam1.install: Allow libopensc1-dev install libscam's .la
    file.
  * debian/control: Have libopensc1-dev replace older versions of libscam
    because of the above.

 -- Eric Dorland <eric@debian.org>  Sat, 27 Nov 2004 14:25:43 -0500

opensc (0.9.4-4) unstable; urgency=medium

  * Target unstable. Urgency medium since I'd like to see this in testing.

 -- Eric Dorland <eric@debian.org>  Thu, 25 Nov 2004 23:50:05 -0500

opensc (0.9.4-3) experimental; urgency=low

  * debian/control: Add mozilla-opensc package. 
  * debian/mozilla-opensc.install: Added file, install plugin files. 
  * debian/rules: 
    - Add AUTHORS file to all docs.
    - Add DEB_SHLIBDEPS_INCLUDE so we can find our own libs. 
  * debian/libopensc1.shlibs: Add info for libpkcs11.
  * debian/opensc.docs: Added file, install QUICKSTART doc.
  * debian/libpam-opensc.docs: Added file, install PAM_README file. 
  * debian/libscam1.install: libscam is now a full lib, install just the
    .so.* portions.
  * debian/libopensc1-dev.install: Install libscam's .so and .la.
  * debian/libscam1.shlibs: Add scam shlib.

 -- Eric Dorland <eric@debian.org>  Thu, 18 Nov 2004 00:57:10 -0500

opensc (0.9.4-2) experimental; urgency=low

  * debian/control: 
    - Add section to source headers.
    - Add appropriate conflicts and replaces for the library packages.

 -- Eric Dorland <eric@debian.org>  Sat, 13 Nov 2004 12:33:03 -0500

opensc (0.9.4-1) experimental; urgency=low

  * New upstream release. Target experimental to give freeswan guys a
    chance. (Closes: #279968, #260828)
  * src/libopensc/reader-pcsc.c: Resolve some conflicts from previous
    patches, now in synch with upstream.
  * debian/{libopensc0-dev.install, libopensc0.install, libopensc0.shlibs,
    libscam0.install, libscam0.shlibs}: Renamed to change 0 to 1 to
    reflect new soname.
  * debian/control: 
    - Change package name to reflect new soname.
    - Build-depend on pkg-config, for libs that use it. 
  * debian/*.shlibs: Bump up sonames and versions.

 -- Eric Dorland <eric@debian.org>  Sat, 13 Nov 2004 00:41:51 -0500

opensc (0.8.1-7) unstable; urgency=medium

  * Urgency medium since this reenables pcsclite support. 
  * {configure,configure.in}: Replace /pcsc with /PCSC for new pcsclite
    include location.
  * src/libopensc/reader-pcsc.c: Replace LPCSTR with LPCTSTR for new
    libpcsclite.

 -- Eric Dorland <eric@debian.org>  Tue, 20 Jul 2004 23:04:27 -0400

opensc (0.8.1-6) unstable; urgency=low

  * configure.in: use _pic.a instead of -pic.a, openssl changed.
  * configure: Rebuild.
  * debian/control: 
      - Build-depend on libssl-dev (>= 0.9.7d-3) for pic.a
        renaming.
      - Build-depend on libpcsclite-dev (>= 1.2.9-beta1) for new 
        libpcsclite1. (Closes: #247697)
  * src/libopensc/reader-pcsc.c: Patch for new libpcsclite1. Thanks
    Ludovic Rousseau.

 -- Eric Dorland <eric@debian.org>  Sat, 29 May 2004 21:07:28 -0400

opensc (0.8.1-5) unstable; urgency=low

  * debian/control: 
    - Make libopensc* and libscam0 optional and everything
      else extra, to allow things in optional to link to the libs. I 
      still need to resolve the dependency on libpcsc (it's in extra).
    - Build depend on libssl-dev (>= 0.9.7d-2) for PIC libs.
    - Make debhelper build dep >> 4.1.
  * configure.in: Use libcrypto-pic to work around build problems on
    architectures that need PIC libs. (Closes: #239422)
  * configure: Rebuild.

 -- Eric Dorland <eric@debian.org>  Sun, 16 May 2004 20:41:43 -0400

opensc (0.8.1-4) unstable; urgency=low

  * debian/control: Build-Depend on libassuan-dev that provides PIC
    libs. (Closes: #239422)

 -- Eric Dorland <eric@debian.org>  Sun, 28 Mar 2004 22:22:53 -0500

opensc (0.8.1-3) unstable; urgency=low

  * debian/libpam-opensc.install: Install pam modules into /lib/security
    rather than /usr/lib/security. (Closes: #235948)
  * debian/control: 
    - libpam-opensc needs to depend on libscam0. (Closes: #235949)
    - Shorten libopensc0 short description.
  * docs/pkcs15-init.1: Add .SH NAME line.
  * docs/pkcs15-profile.5.in: Change the .ds line to the actual name, add
    .SH NAME line (half of #231535)
  * docs/pkcs15.7: Other half, add .ds line, add .SH NAME line (Closes:
    #231535)

 -- Eric Dorland <eric@debian.org>  Sat,  6 Mar 2004 19:30:54 -0500

opensc (0.8.1-2) unstable; urgency=low

  * debian/control: Build with libopenct0-dev.

 -- Eric Dorland <eric@debian.org>  Tue, 27 Jan 2004 23:34:43 -0500

opensc (0.8.1-1) unstable; urgency=low

  * Initial release. (Based loosely on the packaging by Joe Phillips
    <joe.phillips@innovationsw.com>) (Closes: #157979, #187551)
  * Relibtoolize to fix build problem.

 -- Eric Dorland <eric@debian.org>  Mon, 29 Dec 2003 16:43:01 -0500
