From 56c979a4e24e8f5f95b95a41a00cb7239242b84c Mon Sep 17 00:00:00 2001 From: pkgagent Date: Thu, 6 Aug 2026 19:27:58 +0800 Subject: [PATCH] fix CVE-2026-10275 Backport upstream commit 814f745b3b6d100295f65f1935edd33d520d33ab (pkcs11-tool: prevent buffer overflow) for the test_kpgen_certwrite object ID boundary check. Co-Authored-By: Claude Opus 4.7 --- opensc-0.26.0-CVE-2026-10275.patch | 27 +++++++++++++++++++++++++++ opensc.spec | 9 ++++++++- 2 files changed, 35 insertions(+), 1 deletion(-) create mode 100644 opensc-0.26.0-CVE-2026-10275.patch diff --git a/opensc-0.26.0-CVE-2026-10275.patch b/opensc-0.26.0-CVE-2026-10275.patch new file mode 100644 index 0000000..024b786 --- /dev/null +++ b/opensc-0.26.0-CVE-2026-10275.patch @@ -0,0 +1,27 @@ +From 814f745b3b6d100295f65f1935edd33d520d33ab Mon Sep 17 00:00:00 2001 +From: Frank Morgner +Date: Mon, 11 May 2026 11:00:28 +0200 +Subject: [PATCH] pkcs11-tool: prevent buffer overflow + +Reported by @HMF2021 hippofu999 + +Adapted-by: PkgAgent/deepseek-v4 (modified to adapt to opencloudos-stream) +--- + src/tools/pkcs11-tool.c | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git a/src/tools/pkcs11-tool.c b/src/tools/pkcs11-tool.c +index 34ec3a5..5ad9a6f 100644 +--- a/src/tools/pkcs11-tool.c ++++ b/src/tools/pkcs11-tool.c +@@ -8390,6 +8390,10 @@ static CK_SESSION_HANDLE test_kpgen_certwrite(CK_SLOT_ID slot, CK_SESSION_HANDLE + return session; + } + opt_object_id_len = (size_t) i; ++ if (opt_object_id_len > sizeof(opt_object_id)) { ++ fprintf(stderr, "ERR: object ID too long\n"); ++ return session; ++ } + memcpy(opt_object_id, tmp, opt_object_id_len); + + /* This is done in NSS */ diff --git a/opensc.spec b/opensc.spec index ec307fc..5680beb 100644 --- a/opensc.spec +++ b/opensc.spec @@ -4,13 +4,16 @@ Summary: Smart card library and applications Name: opensc Version: 0.26.0 -Release: 1%{?dist} +Release: 2%{?dist} License: LGPLv2+ URL: https://github.com/OpenSC/OpenSC/wiki Source0: https://github.com/OpenSC/OpenSC/releases/download/%{version}/%{name}-%{version}.tar.gz Source1: opensc.module +# CVE-2026-10275: pkcs11-tool test_kpgen_certwrite buffer overflow +Patch0001: opensc-0.26.0-CVE-2026-10275.patch + BuildRequires: make autoconf automake libtool gcc BuildRequires: pcsc-lite-devel readline-devel openssl-devel BuildRequires: /usr/bin/xsltproc docbook-style-xsl zlib-devel @@ -152,6 +155,10 @@ rm %{buildroot}%{_mandir}/man1/opensc-notify.1* %changelog +* Thu Aug 06 2026 PkgAgent Robot - 0.26.0-2 +- [Type] security +- [DESC] Fix CVE-2026-10275: pkcs11-tool test_kpgen_certwrite buffer overflow on object ID + * Mon Nov 18 2024 Anakin Zhang - 0.26.0-1 - [TYPE] security - [DESC] Upgrade to 0.26.0 to fix CVEs -- Gitee