{"id":"CVE-2024-0914","aliases":["ALSA-2024:1239","ALSA-2024:1608","AZL-34206","AZL-36965","CLSA-2026-1784542737","DEBIAN-CVE-2024-0914","EUVD-2024-16696","GHSA-qghg-5fph-q28c","MGASA-2024-0152","OESA-2026-1322","OESA-2026-1381","RHSA-2024:1239","RHSA-2024:1411","RHSA-2024:1608","RHSA-2024:1856","RHSA-2024:1992","RLSA-2024:1608","SUSE-SU-2024:1447-1","SUSE-SU-2024:2298-1","UBUNTU-CVE-2024-0914","openSUSE-SU-2024:14195-1"],"status":"published","title":"Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)","description":"A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00878,"percentile":0.59479,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203","CWE-385"],"published":"2024-01-31T04:53:28Z","modified":"2026-11-05T21:15:34Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"opencryptoki","fixed_in":["3.21.0-9.el9_3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"opencryptoki-ccatok","fixed_in":["3.21.0-9.el9_3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"opencryptoki-devel","fixed_in":["3.21.0-9.el9_3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"opencryptoki-ep11tok","fixed_in":["3.21.0-9.el9_3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"opencryptoki-icatok","fixed_in":["3.21.0-9.el9_3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"opencryptoki-icsftok","fixed_in":["3.21.0-9.el9_3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"opencryptoki-libs","fixed_in":["3.21.0-9.el9_3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"opencryptoki-swtok","fixed_in":["3.21.0-9.el9_3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"opencryptoki","fixed_in":["3.21.0-10.el8_9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"opencryptoki-ccatok","fixed_in":["3.21.0-10.el8_9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"opencryptoki-devel","fixed_in":["3.21.0-10.el8_9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"opencryptoki-ep11tok","fixed_in":["3.21.0-10.el8_9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"opencryptoki-icatok","fixed_in":["3.21.0-10.el8_9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"opencryptoki-icsftok","fixed_in":["3.21.0-10.el8_9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"opencryptoki-libs","fixed_in":["3.21.0-10.el8_9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"opencryptoki-swtok","fixed_in":["3.21.0-10.el8_9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"opencryptoki-tpmtok","fixed_in":["3.21.0-10.el8_9.alma.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"opencryptoki","fixed_in":["3.24.0-3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"opencryptoki","fixed_in":["3.19.0-2.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"opencryptoki-devel","fixed_in":["3.19.0-2.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"opencryptoki-icsftok","fixed_in":["3.19.0-2.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"opencryptoki-libs","fixed_in":["3.19.0-2.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"opencryptoki-swtok","fixed_in":["3.19.0-2.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"opencryptoki","fixed_in":["3.23.0+dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"opencryptoki","fixed_in":["3.23.0+dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"opencryptoki","fixed_in":["3.23.0-1.1.mga9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-ccatok","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-ccatok-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-debugsource","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-ep11tok","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-ep11tok-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-icatok","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-icatok-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-icsftok","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-icsftok-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-libs","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-libs-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-swtok","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-swtok-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-ccatok-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-debugsource","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-devel","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-ep11tok-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-icatok-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-icsftok-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-libs-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-swtok-debuginfo","fixed_in":["0:3.21.0-9.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-ccatok","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-ccatok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-debugsource","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-ep11tok","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-ep11tok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-icatok","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-icatok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-icsftok","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-icsftok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-libs","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-libs-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-swtok","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-swtok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-tpmtok","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-tpmtok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-ccatok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-debugsource","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-devel","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-ep11tok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-icatok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-icsftok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-libs-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-swtok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-tpmtok-debuginfo","fixed_in":["0:3.19.0-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-ccatok","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-ccatok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-debugsource","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-ep11tok","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-ep11tok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-icatok","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-icatok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-icsftok","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-icsftok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-libs","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-libs-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-swtok","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-swtok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-tpmtok","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-tpmtok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-ccatok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-debugsource","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-devel","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-ep11tok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-icatok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-icsftok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-libs-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-swtok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-tpmtok-debuginfo","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-ccatok","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-ccatok-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-debugsource","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-ep11tok","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-ep11tok-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-icatok","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-icatok-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-icsftok","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-icsftok-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-libs","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-libs-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-swtok","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-swtok-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-ccatok-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-debugsource","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-devel","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-ep11tok-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-icatok-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-icsftok-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-libs-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-swtok-debuginfo","fixed_in":["0:3.19.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-ccatok","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-ccatok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-debugsource","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-ep11tok","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-ep11tok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-icatok","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-icatok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-icsftok","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-icsftok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-libs","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-libs-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-swtok","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-swtok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-tpmtok","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-tpmtok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-ccatok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-debugsource","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-devel","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-ep11tok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-icatok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-icsftok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-libs-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-swtok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-tpmtok-debuginfo","fixed_in":["0:3.17.0-6.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"opencryptoki","fixed_in":["0:3.21.0-10.el8_9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openCryptoki","fixed_in":["3.23.0-150500.3.3.13"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"openCryptoki","fixed_in":["3.23.0-150500.3.3.13"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"openCryptoki","fixed_in":["3.23.0-150500.3.3.13"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openCryptoki","fixed_in":["3.17.0-5.9.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openCryptoki","fixed_in":["3.17.0-5.9.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openCryptoki","fixed_in":["3.17.0-5.9.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openCryptoki","fixed_in":["3.23.0-4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-9.el9_3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"opencryptoki-ccatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-9.el9_3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"opencryptoki-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-9.el9_3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"opencryptoki-ep11tok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-9.el9_3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"opencryptoki-icatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-9.el9_3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"opencryptoki-icsftok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-9.el9_3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"opencryptoki-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-9.el9_3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"opencryptoki-swtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-9.el9_3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-10.el8_9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opencryptoki-ccatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-10.el8_9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opencryptoki-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-10.el8_9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opencryptoki-ep11tok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-10.el8_9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opencryptoki-icatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-10.el8_9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opencryptoki-icsftok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-10.el8_9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opencryptoki-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-10.el8_9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opencryptoki-swtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-10.el8_9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opencryptoki-tpmtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.0-10.el8_9.alma.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.17.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24.0-3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-2.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"opencryptoki-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-2.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"opencryptoki-icsftok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-2.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"opencryptoki-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-2.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"opencryptoki-swtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-2.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.23.0+dfsg-0.1","3.23.0+dfsg-0.2","3.23.0+dfsg-0.3","3.23.0+dfsg-0.4","3.27.0-1","3.8.1+dfsg-3.2"]},{"source":"osv","ecosystem":"Debian:13","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.0+dfsg-0.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.0+dfsg-0.1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.0-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-1.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-ccatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-ccatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-ep11tok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-ep11tok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-icatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-icatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-icsftok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-icsftok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-swtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opencryptoki-swtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-ccatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-ep11tok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-icatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-icsftok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"opencryptoki-swtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-9.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-ccatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-ccatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-ep11tok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-ep11tok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-icatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-icatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-icsftok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-icsftok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-swtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-swtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-tpmtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"opencryptoki-tpmtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-ccatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-ep11tok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-icatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-icsftok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-swtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"opencryptoki-tpmtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-ccatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-ccatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-ep11tok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-ep11tok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-icatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-icatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-icsftok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-icsftok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-swtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-swtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-tpmtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"opencryptoki-tpmtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-ccatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-ep11tok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-icatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-icsftok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-swtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"opencryptoki-tpmtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-ccatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-ccatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-ep11tok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-ep11tok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-icatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-icatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-icsftok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-icsftok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-swtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"opencryptoki-swtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-ccatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-ep11tok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-icatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-icsftok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"opencryptoki-swtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-ccatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-ccatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-ep11tok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-ep11tok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-icatok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-icatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-icsftok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-icsftok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-swtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-swtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-tpmtok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"opencryptoki-tpmtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-ccatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-ep11tok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-icatok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-icsftok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-swtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"opencryptoki-tpmtok-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.0-6.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.0-10.el8_9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openCryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.0-150500.3.3.13"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"openCryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.0-150500.3.3.13"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"openCryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.0-150500.3.3.13"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openCryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.0-5.9.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openCryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.0-5.9.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openCryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.0-5.9.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1+dfsg-3ubuntu5","3.4.1+dfsg-1ubuntu1","3.4.1+dfsg-1ubuntu2","3.4.1+dfsg-1ubuntu3","3.4.1+dfsg-1ubuntu4","3.4.1+dfsg-1ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.0+dfsg-4","3.8.1+dfsg-2","3.8.1+dfsg-3","3.8.2+dfsg-0ubuntu1","3.9.0+dfsg-0ubuntu1","3.9.0+dfsg-0ubuntu1.1","3.9.0+dfsg-0ubuntu1.2","3.9.0+dfsg-0ubuntu1.3","3.9.0+dfsg-0ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.11.1+dfsg-0ubuntu2","3.11.1+dfsg-0ubuntu3","3.12.1+dfsg-0ubuntu1","3.13.0+dfsg-0ubuntu4","3.13.0+dfsg-0ubuntu5","3.13.0+dfsg-0ubuntu5.1","3.13.0+dfsg-0ubuntu5.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.16.0+dfsg-0ubuntu1","3.16.0+dfsg-0ubuntu2","3.16.0+dfsg-0ubuntu3","3.17.0+dfsg+20220202.b40982e-0ubuntu1","3.17.0+dfsg+20220202.b40982e-0ubuntu1.1","3.17.0+dfsg+20220202.b40982e-0ubuntu1.2","3.17.0+dfsg+20220202.b40982e-0ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.21.0+dfsg-0ubuntu1","3.21.0+dfsg-0ubuntu2","3.22.0+dfsg-0ubuntu1","3.23.0+dfsg-0ubuntu1","3.23.0+dfsg-0ubuntu2","3.23.0+dfsg-0ubuntu3","3.23.0+dfsg-0ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.24.0+git20250128.0462717+dfsg-0ubuntu1","3.25.0+dfsg-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.26.0+dfsg-0ubuntu1","3.27.0+dfsg-0ubuntu1","3.27.0+dfsg-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"opencryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.25.0+dfsg-0ubuntu1","3.26.0+dfsg-0ubuntu1","3.26.0+dfsg-0ubuntu1.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openCryptoki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.0-4.1"}]}]}],"products":[{"vendor":"opencryptoki_project","product":"opencryptoki"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:1239","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1411","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1608","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1856","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1992","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-0914","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260407","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Patch","report"]},{"url":"https://people.redhat.com/~hkario/marvin/","tags":["x_transferred","Third Party Advisory","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0914","tags":["web","advisory"]},{"url":"https://people.redhat.com/~hkario/marvin"},{"url":"https://github.com/advisories/GHSA-qghg-5fph-q28c"},{"url":"https://bugzilla.redhat.com/2260407","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1239.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-1608.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784542737.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0914.json","tags":["advisory"]},{"url":"https://github.com/opencryptoki/opencryptoki","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-0914","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0152.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33124","tags":["report"]},{"url":"https://lwn.net/Articles/970137/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1322","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1381","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22791","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23893","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1239.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-0914","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1411.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1608.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1856.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1992.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:1608","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241447-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219217","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0914","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242298-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1220266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-0914","tags":["report"]},{"url":"https://github.com/opencryptoki/opencryptoki/issues/731","tags":["report"]},{"url":"https://github.com/opencryptoki/opencryptoki/pull/737","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-0914","title":"Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)","description":"A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.","status":"published","published":"2024-01-31T04:53:28.508Z","modified":"2026-11-05T11:39:54.98Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-203"],"updated_at":"2026-11-05T13:18:22.408512Z"}],"euvd":[{"id":"EUVD-2024-16696","description":"A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.","status":"published","published":"2024-01-31T04:53:28Z","modified":"2026-11-05T11:39:54Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T13:14:14.11293Z"}],"ghsa":[{"id":"GHSA-qghg-5fph-q28c","title":"A timing side-channel vulnerability has been discovered in the opencryptoki package while...","description":"A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.","status":"published","published":"2024-01-31T06:30:17Z","modified":"2026-02-25T21:31:16Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203","CWE-385"],"updated_at":"2026-11-02T15:06:22.774985Z"}],"nvd":[{"id":"CVE-2024-0914","description":"A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.","status":"published","published":"2024-01-31T05:15:08.137Z","modified":"2026-11-05T12:17:43.383Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-05T16:36:40.983114Z"}],"osv":[{"id":"AZL-34206","title":"CVE-2024-0914 affecting package opencryptoki 3.17.0-1","description":"A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.","status":"published","published":"2024-01-31T05:15:08Z","modified":"2026-04-21T04:27:04.078312Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-36965","title":"CVE-2024-0914 affecting package opencryptoki for versions less than 3.24.0-3","description":"A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.","status":"published","published":"2024-01-31T05:15:08Z","modified":"2026-04-21T04:34:13.970371Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"CVE-2024-0914","title":"Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)","description":"A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.","status":"published","published":"2024-01-31T04:53:28.508Z","modified":"2026-11-07T02:30:28.300954618Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203"],"updated_at":"2026-11-07T03:07:52.010191Z"},{"id":"DEBIAN-CVE-2024-0914","description":"A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.","status":"published","published":"2024-01-31T05:15:08.137Z","modified":"2026-11-02T12:00:21.452058735Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2026-1381","title":"opencryptoki security update","description":"openCryptoki is an implementation of the PKCS #11 API that allows interfacing to devices that hold cryptographic information and perform cryptographic functions. openCryptoki provides application portability by isolating the application from the details of the cryptographic device. Isolating the application also provides an added level of security. The openCryptoki API provides a standard programming interface between applications and all kinds of portable cryptographic devices.\r\n\r\nSecurity Fix(es):\n\nA timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.(CVE-2024-0914)\n\nopenCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation allows an attacker with local access to cause out-of-bounds writes in the host process by supplying a compressed EC public key and invoking C_WrapKey. This can lead to heap corruption, or denial-of-service.(CVE-2026-22791)\n\nopenCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged contexts. A token-group user can redirect file operations to arbitrary filesystem targets by planting symlinks in group-writable token directories, resulting in privilege escalation or data exposure. Token and lock directories are 0770 (group-writable for token users), so any token-group member can plant files and symlinks inside them. When run as root, the base code handling token directory file access, as well as several openCryptoki tools used for administrative purposes, may reset ownership or permissions on existing files inside the token directories. An attacker with token-group membership can exploit the system when an administrator runs a PKCS#11 application or administrative tool that performs chown on files inside the token directory during normal maintenance. This issue is fixed in commit 5e6e4b4, but has not been included in a released version at the time of publication.(CVE-2026-23893)","status":"published","published":"2026-02-13T11:10:24Z","modified":"2026-08-18T01:19:33.39653003Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"RHSA-2024:1239","title":"Red Hat Security Advisory: opencryptoki security update","status":"published","published":"2024-09-16T17:54:38Z","modified":"2026-06-26T12:21:20.26485977Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1411","title":"Red Hat Security Advisory: opencryptoki security update","status":"published","published":"2024-09-16T17:54:47Z","modified":"2026-06-26T12:22:37.389917464Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1608","title":"Red Hat Security Advisory: opencryptoki security update","status":"published","published":"2024-09-16T17:54:57Z","modified":"2026-06-26T12:22:37.104036672Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1856","title":"Red Hat Security Advisory: opencryptoki security update","status":"published","published":"2024-09-16T17:55:07Z","modified":"2026-06-26T12:22:37.909253741Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1992","title":"Red Hat Security Advisory: opencryptoki security update","status":"published","published":"2024-09-16T17:55:17Z","modified":"2026-06-26T12:22:31.847198993Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2024-0914","description":"A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.","status":"published","published":"2024-01-31T05:15:00Z","modified":"2026-10-17T12:56:27.963339747Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"ALSA-2024:1239","title":"Moderate: opencryptoki security update","description":"The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.\n\nSecurity Fix(es):\n\n* opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-03-07T00:00:00Z","modified":"2026-10-29T11:31:06.122182678Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:1608","title":"Moderate: opencryptoki security update","description":"The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.\n\nSecurity Fix(es):\n\n* opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-02T00:00:00Z","modified":"2026-10-29T11:02:26.323862281Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2026-1784542737","title":"opencryptoki: Fix of CVE-2024-0914","description":"- CVE-2024-0914: fix timing side-channel in RSA PKCS#1 v1.5 decryption (Marvin)","status":"published","published":"2026-07-20T10:19:18Z","modified":"2026-10-26T09:30:11.533163389Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"MGASA-2024-0152","title":"Updated opencryptoki packages fix security vulnerability","description":"A timing side-channel vulnerability has been discovered in the\nopencryptoki package while processing RSA PKCS#1 v1.5 padded\nciphertexts. This flaw could potentially enable unauthorized RSA\nciphertext decryption or signing, even without access to the\ncorresponding private key. (CVE-2024-0914)\n","status":"published","published":"2024-04-27T06:26:16Z","modified":"2026-04-16T04:44:33.937853405Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"OESA-2026-1322","title":"opencryptoki security update","description":"openCryptoki is an implementation of the PKCS #11 API that allows interfacing to devices that hold cryptographic information and perform cryptographic functions. openCryptoki provides application portability by isolating the application from the details of the cryptographic device. Isolating the application also provides an added level of security. The openCryptoki API provides a standard programming interface between applications and all kinds of portable cryptographic devices.\r\n\r\nSecurity Fix(es):\n\nA timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.(CVE-2024-0914)","status":"withdrawn","published":"2026-02-06T15:57:30Z","modified":"2026-04-25T08:00:15.310354Z","updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"openSUSE-SU-2024:14195-1","title":"openCryptoki-3.23.0-4.1 on GA media","description":"These are all security issues fixed in the openCryptoki-3.23.0-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-15T00:00:00Z","modified":"2026-02-04T03:13:03.638226Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2024:1608","title":"Moderate: opencryptoki security update","description":"The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.\n\nSecurity Fix(es):\n\n* opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-05T14:55:53.600745Z","modified":"2026-02-05T13:30:15.501583Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:1447-1","title":"Security update for openCryptoki","description":"This update for openCryptoki fixes the following issues:\n\nUpgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361)\n\n* EP11: Add support for FIPS-session mode\n* CVE-2024-0914: Updates to harden against RSA timing attacks (bsc#1219217)\n* Bug fixes\n\n- provide user(pkcs11) and group(pkcs11)\n\nUpgrade to version 3.22 (jsc#PED-3361)\n\n- CCA: Add support for the AES-XTS key type using CPACF protected keys\n- p11sak: Add support for managing certificate objects\n- p11sak: Add support for public sessions (no-login option)\n- p11sak: Add support for logging in as SO (security Officer)\n- p11sak: Add support for importing/exporting Edwards and Montgomery keys\n- p11sak: Add support for importing of RSA-PSS keys and certificates\n- CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different\n\nUpdate to version 3.21 (jsc#PED-3360, jsc#PED-3361)\n\n- EP11 and CCA: Support concurrent HSM master key changes\n- CCA: protected-key option\n- pkcsslotd: no longer run as root user and further hardening\n- p11sak: Add support for additional key types (DH, DSA, generic secret)\n- p11sak: Allow wildcards in label filter\n- p11sak: Allow to specify hex value for CKA_ID attribute\n- p11sak: Support sorting when listing keys\n- p11sak: New commands: set-key-attr, copy-key to modify and copy keys\n- p11sak: New commands: import-key, export-key to import and export keys\n- Remove support for --disable-locks (transactional memory)\n- Updates to harden against RSA timing attacks\n- Bug fixes\n","status":"published","published":"2024-04-26T08:04:43Z","modified":"2026-02-04T04:02:02.679798Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:2298-1","title":"Security update for openCryptoki","description":"This update for openCryptoki fixes the following issues:\n\nopenCryptoki was updated to version to 3.17.0 (bsc#1220266, bsc#1219217)\n\n+ openCryptoki 3.17\n\n - tools: added function to list keys to p11sak\n - common: added support for OpenSSL 3.0\n - common: added support for event notifications\n - ICA: added SW fallbacks\n\n+ openCryptoki 3.16\n\n - EP11: protected-key option\n - EP11: support attribute-bound keys\n - CCA: import and export of secure key objects\n - Bug fixes\n\n+ openCryptoki 3.15.1\n\n - Bug fixes\n\n+ openCryptoki 3.15\n\n - common: conform to PKCS 11 3.0 Baseline Provider profile\n - Introduce new vendor defined interface named 'Vendor IBM'\n - Support C_IBM_ReencryptSingle via 'Vendor IBM' interface\n - CCA: support key wrapping\n - SOFT: support ECC\n - p11sak tool: add remove-key command\n - Bug fixes\n\n+ openCryptoki 3.14\n\n - EP11: Dilitium support stage 2\n - Common: Rework on process and thread locking\n - Common: Rework on btree and object locking\n - ICSF: minor fixes\n - TPM, ICA, ICSF: support multiple token instances\n - new tool p11sak\n\n+ openCryptoki 3.13.0\n\n - EP11: Dilithium support\n - EP11: EdDSA support\n - EP11: support RSA-OAEP with non-SHA1 hash and MGF\n\n+ openCryptoki 3.12.1\n\n - Fix pkcsep11_migrate tool\n\n+ openCryptoki 3.12.0\n\n - Update token pin and data store encryption for soft,ica,cca and ep11\n - EP11: Allow importing of compressed EC public keys\n - EP11: Add support for the CMAC mechanisms\n - EP11: Add support for the IBM-SHA3 mechanisms\n - SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token\n - ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token\n - EP11: Add config option USE_PRANDOM\n - CCA: Use Random Number Generate Long for token_specific_rng()\n - Common rng function: Prefer /dev/prandom over /dev/urandom\n - ICA: add SHA*_RSA_PKCS_PSS mechanisms\n - Bug fixes  \n","status":"published","published":"2024-07-04T07:08:40Z","modified":"2026-02-04T04:26:26.631475Z","updated_at":"2026-11-02T15:53:55.136363Z"}]}}