< back to search

shield Security update for opencryptoki

SUSE-SLE-Micro-6.1-511

This update for openCryptoki fixes the following issues: - CVE-2026-23893: use of symlinks in group-writable token directories can lead to privilege escalation and data exposure (bsc#1257116). - CVE-2026-40253: malformed BER-encoded cryptographic objects can lead to information disclosure and denial of service (bsc#1262283).

Release Date

Apr 27 2026
References

Bugzilla: 1248002, 1257116, 1262283
CVEs: CVE-2026-23893, CVE-2026-40253
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.1 s390x

Packages

openCryptoki
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware

3.23.0-slfo.1.1_2.1 lock rpm