Red Hat Security AdvisoryRHSA-2024:1411
opencryptoki security update
Released 2024-03-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.8) opencryptoki-devel-3.19.0-3.el8_8
- Red Hat Enterprise Linux BaseOS EUS (v.8.8) opencryptoki-3.19.0-3.el8_8, opencryptoki-ccatok-3.19.0-3.el8_8, opencryptoki-ep11tok-3.19.0-3.el8_8 +5
Fixes 1 record
Priority LOW 28
A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00878 · Published 2024-01-31 · Partial fix · 3.23.0, 3.21.0-10.el8_9 +4 CWE-203
