<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="dc96df9d0b9e018d13e8b307cbd82481"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="598">
  <id>dbg111-libopensc2</id>
  <title>opensc security update</title>
  <release>openSUSE 11.1</release>
  <issued date="1236628660"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=480262" id="480262" title="bug number 480262" type="bugzilla"/>
  </references>
  <description>Private data objects on smartcards initialized with OpenSC
could be accessed without authentication (CVE-2009-0368).

Only blank cards initialized with OpenSC are affected by
this problem. Affected cards need to be manually fixed,
updating the opensc package alone is not sufficient!

Please carefully read and follow the instructions on the
following web site if you are using PIN protected private
data objects on smart cards other than Oberthur, and you
have initialized those cards using OpenSC:
http://en.opensuse.org/Smart_Cards/Advisories
</description>
  <pkglist>
    <collection>
        <package name="opensc-debuginfo" arch="i586" version="0.11.6" release="5.2.1">
          <filename>opensc-debuginfo-0.11.6-5.2.1.i586.rpm</filename>
        </package>
        <package name="opensc-debuginfo" arch="ppc" version="0.11.6" release="5.2.1">
          <filename>opensc-debuginfo-0.11.6-5.2.1.ppc.rpm</filename>
        </package>
        <package name="opensc-debuginfo" arch="x86_64" version="0.11.6" release="5.2.1">
          <filename>opensc-debuginfo-0.11.6-5.2.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-debugsource" arch="i586" version="0.11.6" release="5.2.1">
          <filename>opensc-debugsource-0.11.6-5.2.1.i586.rpm</filename>
        </package>
        <package name="opensc-debugsource" arch="ppc" version="0.11.6" release="5.2.1">
          <filename>opensc-debugsource-0.11.6-5.2.1.ppc.rpm</filename>
        </package>
        <package name="opensc-debugsource" arch="x86_64" version="0.11.6" release="5.2.1">
          <filename>opensc-debugsource-0.11.6-5.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
