Red Hat Security AdvisoryRHSA-2024:1239
opencryptoki security update
Released 2024-03-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) opencryptoki-devel-3.21.0-9.el9_3
- Red Hat Enterprise Linux BaseOS (v. 9) opencryptoki-3.21.0-9.el9_3, opencryptoki-ccatok-3.21.0-9.el9_3, opencryptoki-ep11tok-3.21.0-9.el9_3 +4
Fixes 1 record
Priority LOW 28
A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00878 · Published 2024-01-31 · Partial fix · 3.23.0, 3.21.0-10.el8_9 +4 CWE-203
