OESA-2021-1063

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1063
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2021-1063.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2021-1063
Upstream
Published
2021-03-05T11:02:40Z
Modified
2025-08-12T05:06:02.076512Z
Summary
opensc security update
Details

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to smart cards, e.g. PKCS#11 API, Windows’ Smart Card Minidriver and macOS Tokend.

Security Fix(es):

The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in scpkcs15emugemsafeGPK_init.(CVE-2020-26571)

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.(CVE-2020-26572)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS / opensc

Package

Name
opensc
Purl
pkg:rpm/openEuler/opensc&distro=openEuler-20.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.20.0-6.oe1

Ecosystem specific 

{
    "x86_64": [
        "opensc-0.20.0-6.oe1.x86_64.rpm",
        "opensc-debugsource-0.20.0-6.oe1.x86_64.rpm",
        "opensc-debuginfo-0.20.0-6.oe1.x86_64.rpm",
        "opensc-0.20.0-6.oe1.x86_64.rpm",
        "opensc-debugsource-0.20.0-6.oe1.x86_64.rpm",
        "opensc-debuginfo-0.20.0-6.oe1.x86_64.rpm"
    ],
    "noarch": [
        "opensc-help-0.20.0-6.oe1.noarch.rpm",
        "opensc-help-0.20.0-6.oe1.noarch.rpm"
    ],
    "aarch64": [
        "opensc-0.20.0-6.oe1.aarch64.rpm",
        "opensc-debuginfo-0.20.0-6.oe1.aarch64.rpm",
        "opensc-debugsource-0.20.0-6.oe1.aarch64.rpm",
        "opensc-0.20.0-6.oe1.aarch64.rpm",
        "opensc-debuginfo-0.20.0-6.oe1.aarch64.rpm",
        "opensc-debugsource-0.20.0-6.oe1.aarch64.rpm"
    ],
    "src": [
        "opensc-0.20.0-6.oe1.src.rpm",
        "opensc-0.20.0-6.oe1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP1 / opensc

Package

Name
opensc
Purl
pkg:rpm/openEuler/opensc&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.20.0-6.oe1

Ecosystem specific 

{
    "x86_64": [
        "opensc-0.20.0-6.oe1.x86_64.rpm",
        "opensc-debugsource-0.20.0-6.oe1.x86_64.rpm",
        "opensc-debuginfo-0.20.0-6.oe1.x86_64.rpm"
    ],
    "noarch": [
        "opensc-help-0.20.0-6.oe1.noarch.rpm"
    ],
    "aarch64": [
        "opensc-0.20.0-6.oe1.aarch64.rpm",
        "opensc-debuginfo-0.20.0-6.oe1.aarch64.rpm",
        "opensc-debugsource-0.20.0-6.oe1.aarch64.rpm"
    ],
    "src": [
        "opensc-0.20.0-6.oe1.src.rpm"
    ]
}