-
Bug
-
Resolution: Done-Errata
-
Major
-
rhel-10.0
-
pkcs11-provider-1.0-2.el10_0
-
Yes
-
Important
-
0day
-
2
-
rhel-security-crypto
-
ssg_security
-
1
-
False
-
False
-
-
No
-
Crypto25Q1, Crypto25Q2
-
-
Pass
-
Enabled
-
Automated
-
Release Note Not Required
-
Unspecified
-
Unspecified
-
Unspecified
-
None
We discovered a late bug that can trigger in specific cases that are valid by PKCS#11 spec but uncommon. We are triggering this with the latest kryoptic build as we made that return case more common there.
These upstream commits make pkcs11-provider properly handle the case:
https://github.com/latchset/pkcs11-provider/commit/577471d781d1ee0365f6739b1cfc1c9c566c893a
https://github.com/latchset/pkcs11-provider/commit/02dc73fd441f9f87bd237a1fbd0a7cab9d948cbe
https://github.com/latchset/pkcs11-provider/commit/cf6bcbb4edbe983691996f8fb126c6b143dc796d
- links to
-
RHBA-2025:147058 pkcs11-provider update