{"id":"CLSA-2026-1787393949","summary":"opensc: Fix of 2 CVEs","details":"- CVE-2024-8443: fix heap buffer overflow in the OpenPGP driver when writing the\n  key fingerprint, reject key responses not matching the requested algorithm and\n  set the EC point length from the received response\n- CVE-2026-10275: fix buffer overflow in pkcs11-tool when copying a token\n  supplied CKA_ID into the object id buffer","modified":"2026-10-26T09:31:30.966570481Z","published":"2026-08-22T10:19:20Z","upstream":["CVE-2024-8443","CVE-2026-10275"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1787393949.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8443"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10275"}],"affected":[{"package":{"name":"opensc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/opensc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-5.el9.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1787393949.json"}}],"schema_version":"1.9.0"}