Red Hat Security AdvisoryRHSA-2024:1856
opencryptoki security update
Released 2024-04-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.2) opencryptoki-devel-3.19.0-3.el9_2
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) opencryptoki-3.19.0-3.el9_2, opencryptoki-ccatok-3.19.0-3.el9_2, opencryptoki-ep11tok-3.19.0-3.el9_2 +4
Fixes 1 record
Priority LOW 28
A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00878 · Published 2024-01-31 · Partial fix · 3.23.0, 3.21.0-10.el8_9 +4 CWE-203
