Description of the patch:
This update for opensc fixes the following issues
- CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214).
- CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218).
- CVE-2025-66038: improper compact-TLV length validation can lead to crash or unexpected behavior (bsc#1261219).
- CVE-2025-66215: crafted smart card or USB device can cause a stack-buffer-overflow write (bsc#1261220).
- CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation (bsc#1267246).
- CVE-2026-40528: stack and heap buffer overrun in the
do_key_value() function due to missing length check allows for
memory corruption via a crafted profile configuration file (bsc#1266963).