An update for opencryptoki is now available for openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-1322 Final 1.0 1.0 2026-02-06 Initial 2026-02-06 2026-02-06 openEuler SA Tool V1.0 2026-02-06 opencryptoki security update An update for opencryptoki is now available for openEuler-20.03-LTS-SP4 openCryptoki is an implementation of the PKCS #11 API that allows interfacing to devices that hold cryptographic information and perform cryptographic functions. openCryptoki provides application portability by isolating the application from the details of the cryptographic device. Isolating the application also provides an added level of security. The openCryptoki API provides a standard programming interface between applications and all kinds of portable cryptographic devices. Security Fix(es): A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.(CVE-2024-0914) An update for opencryptoki is now available for master/openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP3/openEuler-22.03-LTS-SP4. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium opencryptoki https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1322 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-0914 https://nvd.nist.gov/vuln/detail/CVE-2024-0914 openEuler-20.03-LTS-SP4 opencryptoki-3.10.0-3.oe2003sp4.aarch64.rpm opencryptoki-debuginfo-3.10.0-3.oe2003sp4.aarch64.rpm opencryptoki-debugsource-3.10.0-3.oe2003sp4.aarch64.rpm opencryptoki-devel-3.10.0-3.oe2003sp4.aarch64.rpm opencryptoki-help-3.10.0-3.oe2003sp4.aarch64.rpm opencryptoki-3.10.0-3.oe2003sp4.src.rpm opencryptoki-3.10.0-3.oe2003sp4.x86_64.rpm opencryptoki-debuginfo-3.10.0-3.oe2003sp4.x86_64.rpm opencryptoki-debugsource-3.10.0-3.oe2003sp4.x86_64.rpm opencryptoki-devel-3.10.0-3.oe2003sp4.x86_64.rpm opencryptoki-help-3.10.0-3.oe2003sp4.x86_64.rpm A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key. 2026-02-06 CVE-2024-0914 openEuler-20.03-LTS-SP4 Medium 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N opencryptoki security update 2026-02-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1322