gpp_maybe Security update for opensc

SUSE-SLE-Micro-5.5-2026-2657

This update for opensc fixes the following issues - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper compact-TLV length validation can lead to crash or unexpected behavior (bsc#1261219). - CVE-2025-66215: crafted smart card or USB device can cause a stack-buffer-overflow write (bsc#1261220). - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation (bsc#1267246). - CVE-2026-40528: stack and heap buffer overrun in the `do_key_value()` function due to missing length check allows for memory corruption via a crafted profile configuration file (bsc#1266963).

Release Date

Jun 26 2026
References

Bugzilla: 1261214, 1261218, 1261219, 1261220, 1266963, 1267246
CVEs: CVE-2025-49010, CVE-2025-66037, CVE-2025-66038, CVE-2025-66215, CVE-2026-10275, CVE-2026-40528
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.5 x86_64

Packages

opensc
Smart Card Utilities

0.22.0-150400.3.17.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 ppc64le

Packages

opensc
Smart Card Utilities

0.22.0-150400.3.17.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 aarch64

Packages

opensc
Smart Card Utilities

0.22.0-150400.3.17.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 s390x

Packages

opensc
Smart Card Utilities

0.22.0-150400.3.17.1 lock rpm lock src