Fedora Packages

opencryptoki-libs-3.27.0-1.fc45 in Fedora Rawhide

↵ Return to the main page of opencryptoki-libs
View build
Search for updates

Package Info (Data from x86_64 build)
🠗 Changelog
🠗 Dependencies
🠗 Provides
🠗 Files

Changelog

Date Author Change
2026-06-09 Than Ngo <than at redhat dot com> - 3.27.0-1 - Update to 3.27.0 * Add base support for PKCS#11 v3.2 * Add support for PKCS#11 v3.2 C_VerifySignature[Init|Update|Final] * Add support for PKCS#11 v3.2 C_EncapsulateKey/C_DecapsulateKey * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with RSA-PKCS and RSA-OAEP mechanisms * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with the ECDH mechanism * Soft/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with the DH-PKCS mechanism * Soft: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types and mechanisms (requires OpenSSL 3.5 or later, or the OQS-provider must be configured) * CCA: Add support for PKCS#11 v3.2 ML-DSA key type and mechanisms (requires CCA v8.4 or later) * EP11: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types and mechanisms (requires an EP11 host library v4.2 or later, and a CEX8P crypto card with firmware v9.6 or later on IBM z17, and v8.39 or later on IBM z16) * p11sak: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types * Soft/ICA: Add support for PKCS#11 v3.2 mechanisms CKM_ECDH_X_AES_KEY_WRAP and CKM_ECDH_COF_AES_KEY_WRAP * p11sak: Add support for key wrapping with PKCS#11 v3.2 mechanisms CKM_ECDH_X_AES_KEY_WRAP and CKM_ECDH_COF_AES_KEY_WRAP * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 mechanism CKM_PUB_KEY_FROM_PRIV_KEY * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.0 Edwards and Montgomery key types and mechanisms * Soft/ICA: Support CKM_ECDH_AES_KEY_WRAP also for Montgomery keys * p11sak: Add support for PKCS#11 v3.0 Edwards and Montgomery key types * Soft: Add support for CKM_ECDH1_COFACTOR_DERIVE * CCA: Add support for additional RSA public exponent values 5, 17, or 257 * p11sak: Add option to list-key command to show EP11 session IDs * Make the maximum number of token objects supported configurable * Fixes for CVE-2026-40253, CVE-2026-23893, and CVE-2026-22791 * Bug fixes - Drop %{ix86} build
2026-05-05 Than Ngo <than at redhat dot com> - 3.26.0-3 - Fix rhbz#2432016: CVE-2026-23893, Privilege Escalation or Data Exposure via Symlink Following
2026-01-16 Fedora Release Engineering <releng at fedoraproject dot org> - 3.26.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
2025-11-28 Than Ngo <than at redhat dot com> - 3.26.0-1 - Update to 3.26.0
2025-07-29 Than Ngo <than at redhat dot com> - 3.25.0-4 - Require openssl >= 3.5.1 - Fix incorrect effective group id of pkcsslotd daemon - Fix covscan findings - Fix detection of EC curve not supported by OpenSSL-3.5.x - Fix the image mode issue again as bootc expects to use /run/lock
2025-07-24 Fedora Release Engineering <releng at fedoraproject dot org> - 3.25.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
2025-06-10 Than Ngo <than at redhat dot com> - 3.25.0-2 - Enable testsuite
2025-06-10 Than Ngo <than at redhat dot com> - 3.25.0-1 - Update to 3.25.0 - Drop patches which are included in upstream - Adapt p11sak patch - Fix RPM build warnings - Add jq and openssl in Build Requirement, required for testcases
2025-04-29 Than Ngo <than at redhat dot com> - 3.24.0-9 - Fix, opencryptoki doesn't work in image mode
2025-03-12 Than Ngo <than at redhat dot com> - 3.24.0-8 - Fix rpminspect issue

Provides

  • group(pkcs11)
  • group(pkcsslotd)
  • libopencryptoki.so.0()(64bit)
  • libopencryptoki.so.0(OPENCRYPTOKI_3.27)(64bit)
  • opencryptoki-libs
  • opencryptoki-libs(x86-64)
  • user(pkcsslotd)

Files


Sources on Pagure