{"id":"CVE-2021-42781","aliases":["AZL-9484","DEBIAN-CVE-2021-42781","DLA-3463-1","DLA-4004-1","EUVD-2021-29737","GHSA-93j9-4rqq-x6gr","MGASA-2021-0512","OESA-2022-1640","SUSE-SU-2021:3582-1","SUSE-SU-2022:1041-1","SUSE-SU-2022:1156-1","openSUSE-SU-2024:11613-1"],"status":"published","title":"Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that...","description":"Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02873,"percentile":0.87013,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-787"],"published":"2021-10-29T14:26:39Z","modified":"2026-10-23T18:04:16Z","fixes":[{"ecosystem":"Azure Linux:2","package":"opensc","fixed_in":["0.22.0-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"opensc","fixed_in":["0.22.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"opensc","fixed_in":["0.22.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"opensc","fixed_in":["0.22.0-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"opensc","fixed_in":["0.20.0-8.oe1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-1+deb10u2"}]}],"versions":["0.19.0-1","0.19.0-1+deb10u1"],"bundled":6},{"source":"osv","ecosystem":"Debian:11","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.0-1+deb11u1"}]}],"versions":["0.21.0-1"],"bundled":18},{"source":"osv","ecosystem":"Mageia:8","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1.mga8"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-8.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.0-150000.3.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.0-150000.3.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.0-150000.3.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.0-150000.3.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1.1"}]}],"bundled":4}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensc","product":"opensc"},{"vendor":"opensc_project","product":"opensc"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016439","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/OpenSC/OpenSC/commit/17d8980c","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/OpenSC/OpenSC/commit/40c50a3a","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/OpenSC/OpenSC/commit/05648b06","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/OpenSC/OpenSC/commit/5d4daf6c","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/OpenSC/OpenSC/commit/cae5c71f","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202209-03","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00025.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/12/msg00026.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42781","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-93j9-4rqq-x6gr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-42781","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0512.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29607","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-October/009683.html","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1640","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213582-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191957","tags":["report"]},{"url":"https://bugzilla.suse.com/1191992","tags":["report"]},{"url":"https://bugzilla.suse.com/1192000","tags":["report"]},{"url":"https://bugzilla.suse.com/1192005","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42782","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221041-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1114649","tags":["report"]},{"url":"https://bugzilla.suse.com/1122756","tags":["report"]},{"url":"https://bugzilla.suse.com/1149746","tags":["report"]},{"url":"https://bugzilla.suse.com/1149747","tags":["report"]},{"url":"https://bugzilla.suse.com/1158256","tags":["report"]},{"url":"https://bugzilla.suse.com/1158305","tags":["report"]},{"url":"https://bugzilla.suse.com/1170809","tags":["report"]},{"url":"https://bugzilla.suse.com/1177364","tags":["report"]},{"url":"https://bugzilla.suse.com/1177378","tags":["report"]},{"url":"https://bugzilla.suse.com/1177380","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26572","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221156-1/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-42781","description":"Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.","status":"published","published":"2022-04-18T00:00:00Z","modified":"2025-11-03T21:45:30.959Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:32:58.739039Z"}],"euvd":[{"id":"EUVD-2021-29737","description":"Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.","status":"published","published":"2022-04-18T00:00:00Z","modified":"2025-11-03T21:45:30Z","updated_at":"2026-11-02T19:49:31.7352Z"}],"ghsa":[{"id":"GHSA-93j9-4rqq-x6gr","title":"Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that...","description":"Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.","status":"published","published":"2022-04-19T00:00:52Z","modified":"2025-11-04T00:31:33Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T15:04:28.385807Z"}],"nvd":[{"id":"CVE-2021-42781","description":"Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.","status":"published","published":"2022-04-18T17:15:16.303Z","modified":"2026-06-17T04:10:08.2Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:07:06.029737Z"}],"osv":[{"id":"AZL-9484","title":"CVE-2021-42781 affecting package opensc for versions less than 0.22.0-1","description":"Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.","status":"published","published":"2022-04-18T17:15:16Z","modified":"2026-04-21T04:35:03.482603Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:12.028669Z"},{"id":"CVE-2021-42781","description":"Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.","status":"published","published":"2022-04-18T17:15:16.303Z","modified":"2026-10-20T10:54:05.471240888Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:21.557945Z"},{"id":"DEBIAN-CVE-2021-42781","description":"Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.","status":"published","published":"2022-04-18T17:15:16.303Z","modified":"2026-10-23T18:04:16.164870807Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2022-1640","title":"opensc security update","description":"OpenSC provides a set of libraries and utilities to work with smart cards.Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to smart cards, e.g. PKCS#11 API, Windows’ Smart Card Minidriver and macOS Tokend.\r\n\nSecurity Fix(es):\nHeap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.(CVE-2021-42781)","status":"published","published":"2022-05-11T11:04:54Z","modified":"2026-08-18T01:16:34.567223815Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"DLA-3463-1","title":"opensc - security update","status":"published","published":"2023-06-21T00:00:00Z","modified":"2026-03-09T01:21:14.190295Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-4004-1","title":"opensc - security update","status":"published","published":"2024-12-28T00:00:00Z","modified":"2026-03-09T01:19:21.029361Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2021-0512","title":"Updated opensc packages fix security vulnerability","description":"CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).\nCVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).\nCVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c\n (bsc#1192000).\nCVE-2021-42782: Stack buffer overflow issues in various places\n (bsc#1191957).\n","status":"published","published":"2021-11-18T21:50:59Z","modified":"2026-04-16T04:42:10.422065778Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:11613-1","title":"opensc-0.22.0-2.1 on GA media","description":"These are all security issues fixed in the opensc-0.22.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:26:46.658343Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:3582-1","title":"Security update for opensc","description":"This update for opensc fixes the following issues:\n\n- CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).\n- CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).\n- CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).\n- CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).\n","status":"published","published":"2021-10-29T14:26:39Z","modified":"2026-02-04T02:13:00.291227Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2022:1041-1","title":"Security update for opensc","description":"This update for opensc fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).\n- CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).\n- CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).\n- CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).\n- CVE-2019-6502: Fixed a memory leak in sc_context_create() (bsc#1122756).\n- CVE-2020-26570: Fixed a heap based buffer overflow in sc_oberthur_read_file (bsc#1177364).\n- CVE-2020-26572: Prevent out of bounds write (bsc#1177378)\n- CVE-2020-26571: gemsafe GPK smart card software driver stack-based buffer overflow (bsc#1177380)\n- CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747)\n- CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256)\n- CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746).\n- CVE-2019-19481: Fixed an improper handling of buffer limits for CAC certificates (bsc#1158305).\n- CVE-2019-20792: Fixed a double free in coolkey_free_private_data (bsc#1170809). \n\nNon-security issues fixed:\n\n- Fixes segmentation fault in 'pkcs11-tool.c'. (bsc#1114649)\n","status":"published","published":"2022-03-30T13:25:11Z","modified":"2026-02-04T03:02:40.711283Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:1156-1","title":"Security update for opensc","description":"This update for opensc fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).\n- CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).\n- CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).\n- CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).\n\nNon-security issues fixed: \n\n- Fixes segmentation fault in 'pkcs11-tool.c'. (bsc#1114649)\n","status":"published","published":"2022-04-12T07:55:14Z","modified":"2026-02-04T03:25:28.546543Z","updated_at":"2026-11-02T15:53:50.513981Z"}]}}