Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 584
Alerts This Week
Warning Icon 1 584

openSUSE opensc Important Security Update Stack Overflow Vuln 2026-2657-1

opensuse
Calendar Grey June 26, 2026
Scroller Opensuse
# Security update for opensc Announcement ID: SUSE-SU-2026:2657-1 Release Date: 2026-06-26T12:25:12Z
An update that solves six vulnerabilities can now be installed.

Description

This update for opensc fixes the following issues

* CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device

responses (bsc#1261214).

* CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218).

* CVE-2025-66038: improper compact-TLV length validation can lead to crash or

unexpected behavior (bsc#1261219).

* CVE-2025-66215: crafted smart card or USB device can cause a stack-buffer-

overflow write (bsc#1261220).

* CVE-2026-10275: global buffer overflow during key pair generation tests due

to missing input validation (bsc#1267246).

* CVE-2026-40528: stack and heap buffer overrun in the `do_key_value()`

function due to missing length check allows for memory corruption via a

crafted profile configuration file (bsc#1266963).

Topics%20covered

Topics Covered

security advisory buffer overflow important stack overflow out-of-bounds OpenSUSE

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Micro for Rancher 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2026-2657=1

* SUSE Linux Enterprise Micro 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2026-2657=1

* SUSE Linux Enterprise Server 15 SP4 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2657=1

* SUSE Linux Enterprise Server 15 SP5 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2657=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2657=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2657=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2657=1

* SUSE Linux Enterprise Micro for...

Read the Full Advisory

Package List

* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)

* opensc-debugsource-0.22.0-150400.3.17.1

* opensc-0.22.0-150400.3.17.1

* opensc-debuginfo-0.22.0-150400.3.17.1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64

x86_64)

* opensc-debugsource-0.22.0-150400.3.17.1

* opensc-0.22.0-150400.3.17.1

* opensc-debuginfo-0.22.0-150400.3.17.1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64

x86_64)

* opensc-debugsource-0.22.0-150400.3.17.1

* opensc-0.22.0-150400.3.17.1

* opensc-debuginfo-0.22.0-150400.3.17.1

* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)

* opensc-debugsource-0.22.0-150400.3.17.1

* opensc-0.22.0-150400.3.17.1

* opensc-debuginfo-0.22.0-150400.3.17.1

* openSUSE Leap 15.4 (x86_64)

* opensc-32bit-0.22.0-150400.3.17.1

* opensc-32bit-debuginfo-0.22.0-150400.3.17.1

* openSUSE Leap 15.4 (aarch64_ilp32)

* opensc-64bit-debuginfo-0.22.0-150400.3.17.1

* opensc-64bit-0.22.0-150400.3.17.1

* SUSE Linux Enterprise Micro for Rancher 5.3...

Read the Full Advisory

References

* bsc#1261214

* bsc#1261218

* bsc#1261219

* bsc#1261220

* bsc#1266963

* bsc#1267246

## References:

* https://www.suse.com/security/cve/CVE-2025-49010.html

* https://www.suse.com/security/cve/CVE-2025-66037.html

* https://www.suse.com/security/cve/CVE-2025-66038.html

* https://www.suse.com/security/cve/CVE-2025-66215.html

* https://www.suse.com/security/cve/CVE-2026-10275.html

* https://www.suse.com/security/cve/CVE-2026-40528.html

* https://bugzilla.suse.com/show_bug.cgi?id=1261214

* https://bugzilla.suse.com/show_bug.cgi?id=1261218

* https://bugzilla.suse.com/show_bug.cgi?id=1261219

* https://bugzilla.suse.com/show_bug.cgi?id=1261220

* https://bugzilla.suse.com/show_bug.cgi?id=1266963

* https://bugzilla.suse.com/show_bug.cgi?id=1267246

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:2657-1
Release Date: 2026-06-26T12:25:12Z
Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5

Topics%20covered

Topics Covered

security advisory buffer overflow important stack overflow out-of-bounds OpenSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.