shield Security update for opensc

SUSE-SLES-16.0-932

This update for opensc fixes the following issues: - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218). - CVE-2025-66038: improper compact-TLV length validation can lead to crash or unexpected behavior (bsc#1261219). - CVE-2025-66215: crafted smart card or USB device can cause a stack-buffer-overflow write (bsc#1261220).

• Release Date
  Jun 15 2026
• References
  Bugzilla: 1261214, 1261218, 1261219, 1261220
  CVEs: CVE-2025-49010, CVE-2025-66037, CVE-2025-66038, CVE-2025-66215
• Type
  security
• Severity
  low

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  opensc
  Smart Card Utilities

  0.26.1-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  opensc
  Smart Card Utilities

  0.26.1-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  opensc
  Smart Card Utilities

  0.26.1-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  opensc
  Smart Card Utilities

  0.26.1-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  opensc
  Smart Card Utilities

  0.26.1-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  opensc
  Smart Card Utilities

  0.26.1-160000.3.1 lock rpm