libopensc2 opensc security update opensc Sicherheitsupdate This update fixes a security issues with opensc that occured when initializing blank smart cards with Siemens CardOS M4. After the initialization anyone could set the PIN of the smart card without authorization (CVE-2008-2235). NOTE: Already initialized cards are still vulnerable after this update. Please use the command-line tool pkcs15-tool with option --test-update and --update when necessary. Please find more information at http://www.opensc-project.org/security.html This is the second attempt to fix this problem. The previous update was unforunately incomplete. Bei der Initialisierung von Smart-Cards mit Siemens CardOS M4 unterlief opensc ein Fehler, der es erlaubte, die PIN im Nachhinein ohne Autorisierung zu ändern. (CVE-2008-2235) HINWEIS: Bereits initialisierte Karten dieses Typs sind immer noch verwundbar. Bitte benutzen Sie das Kommandozeilen-Tool pkcs15-tool mit den Optionen --test-update und --update. Siehe auch http://www.opensc-project.org/security.html Dies ist der zweite Versuch das Problem zu beheben. Das vorherige Update war leider unvollständig. security libopensc2 i586 755adb8a3865a29984c64e831e0e2294410a4cc8 libopensc2 ppc 11a1df8b57b4dfd2fd259c2e60268d02df68dcf2 libopensc2 x86_64 9751cadf3cdfa17006e8bdc34589a46e5a064f07 libopensc2-32bit x86_64 d67db41e25bc42094d8cfc0995b1a9ab415989ff libopensc2-64bit ppc aabd5275d8d3a506913abba592c4e69046f30568 opensc i586 00c9668f470d8005e61180bbb379a9bf540bb0af opensc ppc 28256f0513599e3ae49eb4236aa1dc011b20379f opensc x86_64 636474c433c4e78926e0664f5da6273eb43da186 opensc-32bit x86_64 bb64704cf821d6f5247de7d1c2cf2884947bb58a opensc-64bit ppc 19d5e9ab7d8ca7d3e8aac2eb8d9ce72724b3efec opensc-devel i586 bcaf95d6cd9bc0653f24ca0f291b8f2648c9381c opensc-devel ppc a3e8f657302b7f1cfa35deecf3d6d5ec022b7b3f opensc-devel x86_64 8cfe06b3325b794b15309939448e4fdfce7d2395 libopensc2-5587-patch-message-2 Don't forget to reinitialize your smart cards if you are using cards with Siemens CardOS M4 operating system that were initialized using opensc