EUVD-2024-16696

Malicious code in bioql PyPI...

TencentOS Server 3: opencryptoki (TSSA-2024:0098)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0098 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: opencryptoki (TSSA-2024:0927)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0927 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2024-0914 affecting package opencryptoki for versions less than 3.24.0-3

CVE-2024-0914 affecting package opencryptoki for versions less than 3.24.0-3. An upgraded version of the package is available that resolves this issue...

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

...

Alibaba Cloud Linux 3 : 0210: opencryptoki bug fix and enhancement update (Moderate) (ALINUX3-SA-2024:0210)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0210 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-0914: A timing side-channel vulnerability...

opencryptoki bug fix and enhancement update

An update is available for opencryptoki. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

Linux Distros Unpatched Vulnerability : CVE-2024-0914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS1 v1.5 padded ciphertexts. This flaw could...

Linux Distros Unpatched Vulnerability : CVE-2012-4455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the 1 LCK..opencryptoki or 2...

Linux Distros Unpatched Vulnerability : CVE-2012-4454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the 1...

Advisory ROSA-SA-2025-2728

Software: opencryptoki 3.21.0 OS: ROSA Virtualization 3.0 packageevrstring: opencryptoki-3.21.0-10.rv30 CVE-ID: CVE-2024-0914 BDU-ID: 2024-02839 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the opencryptoki package is related to the processing of RSA PKCS1 augmented ciphertexts. Exploitation of...

RHSA-2024:1992 Red Hat Security Advisory: opencryptoki security update

Bulletin has no description...

RHSA-2024:1856 Red Hat Security Advisory: opencryptoki security update

Bulletin has no description...

RHSA-2024:1608 Red Hat Security Advisory: opencryptoki security update

Bulletin has no description...

RHSA-2024:1411 Red Hat Security Advisory: opencryptoki security update

Bulletin has no description...

RHSA-2024:1239 Red Hat Security Advisory: opencryptoki security update

Bulletin has no description...

RHBA-2021:3054 Red Hat Bug Fix Advisory: opencryptoki bug fix and enhancement update

Bulletin has no description...

OPENSUSE-SU-2024:14195-1 openCryptoki-3.23.0-4.1 on GA media

These are all security issues fixed in the openCryptoki-3.23.0-4.1 package on the GA media of openSUSE Tumbleweed...

SUSE: Security Advisory (SUSE-SU-2024:2298-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12: openCryptoki / openCryptoki-32bit / openCryptoki-64bit / etc (SUSE-SU-2024:2298-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2298-1 advisory. openCryptoki was updated to version to 3.17.0 bsc1220266, bsc1219217 + openCryptoki 3.17 - tools: added function to list keys to p11sak -...