< back to search

shield Security update for opencryptoki
SUSE-SLES-16.0-718

This update for openCryptoki fixes the following issues Security issue: - CVE-2026-40253: Updated fix for malformed BER-encoded cryptographic objects (bsc#1262283). Non security issue: - Refactored .spec file to fully support transactional and immutable operating systems (jsc#PED-14609): * Migrated user and group creation (pkcs11, pkcsslotd) from imperative %pre shell commands to declarative systemd-sysusers configuration. * Replaced manual /var directory tracking and %ghost directives with comprehensive systemd-tmpfiles configurations. * Implemented dynamic, architecture-specific tmpfiles.d generation to properly provision hardware-specific token directories (e.g., ccatok, ep11tok, lite, and HSM_MK_CHANGE). - Fixed permissions for /run/opencryptoki within tmpfiles.d to ensure the daemon can successfully drop privileges and bind its communication socket. * Moved 32-bit and 64-bit shared library symlink creation (such as PKCS11_API.so, stdll, and methods) from %post scriptlets into the %install phase, ensuring they are correctly packaged and tracked on the read-only /usr partition. * Removed legacy /etc/pkcs11 bash migration logic from %post, replacing it with a declarative tmpfiles.d symlink rule. - Cleaned up scriptlets to only execute transaction-safe macros (such as ldconfig and systemd service handlers).

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64
  • Packages
    openCryptoki
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-64bit
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-devel
    Development files for openCryptoki, a PKCS#11 implementation for IBM hardware
    3.26.0-160000.2.1 lock rpm
SUSE Linux Enterprise Server 16.0 ppc64le
  • Packages
    openCryptoki
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-64bit
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-devel
    Development files for openCryptoki, a PKCS#11 implementation for IBM hardware
    3.26.0-160000.2.1 lock rpm
SUSE Linux Enterprise Server 16.0 s390x
  • Packages
    openCryptoki
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-64bit
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-devel
    Development files for openCryptoki, a PKCS#11 implementation for IBM hardware
    3.26.0-160000.2.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
  • Packages
    openCryptoki
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-64bit
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-devel
    Development files for openCryptoki, a PKCS#11 implementation for IBM hardware
    3.26.0-160000.2.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
  • Packages
    openCryptoki
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-64bit
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-devel
    Development files for openCryptoki, a PKCS#11 implementation for IBM hardware
    3.26.0-160000.2.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
  • Packages
    openCryptoki
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-64bit
    An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
    3.26.0-160000.2.1 lock rpm
    openCryptoki-devel
    Development files for openCryptoki, a PKCS#11 implementation for IBM hardware
    3.26.0-160000.2.1 lock rpm