shield Security update for opensc

SUSE-SUSE-MicroOS-5.2-2026-1477

This update for opensc fixes the following issues: - CVE-2025-49010: specially crafted smart card or USB device can lead to a stack buffer overflow write in `GET RESPONSE` (bsc#1261214). - CVE-2025-66037: specially crafted input processed by the `fuzz_pkcs15_reader` harness can lead to an out-of-bounds heap read in the X.509/SPKI handling path (bsc#1261218). - CVE-2025-66038: improper compact-TLV length validation can lead to the dereferecing of out-of-bounds pointers and memory corruption (bsc#1261219). - CVE-2025-66215: specially crafted smart card or USB device can lead to a stack buffer overflow write in `card-oberthur` (bsc#1261220).

• Release Date
  Apr 20 2026
• References
  Bugzilla: 1261214, 1261218, 1261219, 1261220
  CVEs: CVE-2025-49010, CVE-2025-66037, CVE-2025-66038, CVE-2025-66215
• Type
  security
• Severity
  low

cloud_download Downloads

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64

• Packages
  opensc
  Smart Card Utilities

  0.19.0-150100.3.34.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.2 s390x

• Packages
  opensc
  Smart Card Utilities

  0.19.0-150100.3.34.1 lock rpm lock src

SUSE Linux Enterprise Micro for Rancher 5.2 x86_64

• Packages
  opensc
  Smart Card Utilities

  0.19.0-150100.3.34.1 lock rpm lock src