ELBA-2025-20524-0

ELBA-2025-20524-0 - opencryptoki bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2025-11-17

Description

[3.25.0-4]
- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
Resolves: RHEL-109050

[3.25.0-3]
- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
Resolves: RHEL-104602

[3.25.0-2]
- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock

[3.25.0-1]
- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	opencryptoki-3.25.0-4.el9.src.rpm	e77fa5c4fa557a875645df76d820a537c61dce79fc8c8134a02ee9483d1eec55	-	ol9_aarch64_baseos_latest
	opencryptoki-3.25.0-4.el9.src.rpm	e77fa5c4fa557a875645df76d820a537c61dce79fc8c8134a02ee9483d1eec55	-	ol9_aarch64_codeready_builder
	opencryptoki-3.25.0-4.el9.src.rpm	e77fa5c4fa557a875645df76d820a537c61dce79fc8c8134a02ee9483d1eec55	-	ol9_aarch64_u7_baseos_base
	opencryptoki-3.25.0-4.el9.aarch64.rpm	ac1736ae070299227e0fff1d7d3e66a0fc145b92dda72303ceb26180b1a8ae7c	-	ol9_aarch64_baseos_latest
	opencryptoki-3.25.0-4.el9.aarch64.rpm	ac1736ae070299227e0fff1d7d3e66a0fc145b92dda72303ceb26180b1a8ae7c	-	ol9_aarch64_u7_baseos_base
	opencryptoki-devel-3.25.0-4.el9.aarch64.rpm	621b928eae4f27bdc84d7a610c22ac2dcf8f000cf379a5b4ec6cc14b42759e5b	-	ol9_aarch64_codeready_builder
	opencryptoki-icsftok-3.25.0-4.el9.aarch64.rpm	d7daecba11e71a7e1c9d750a5148705f8c03361f261ca69c256dd7f9fc69f06e	-	ol9_aarch64_baseos_latest
	opencryptoki-icsftok-3.25.0-4.el9.aarch64.rpm	d7daecba11e71a7e1c9d750a5148705f8c03361f261ca69c256dd7f9fc69f06e	-	ol9_aarch64_u7_baseos_base
	opencryptoki-libs-3.25.0-4.el9.aarch64.rpm	3fe24323cd272e7bdf599ebc3aea6c313ad3ae0a9d97ee171b6db39bfa933f79	-	ol9_aarch64_baseos_latest
	opencryptoki-libs-3.25.0-4.el9.aarch64.rpm	3fe24323cd272e7bdf599ebc3aea6c313ad3ae0a9d97ee171b6db39bfa933f79	-	ol9_aarch64_u7_baseos_base
	opencryptoki-swtok-3.25.0-4.el9.aarch64.rpm	53f504616e01f5b67d4c376f12ec8f22b71179d2d0980c2dbb254b826ed1ec05	-	ol9_aarch64_baseos_latest
	opencryptoki-swtok-3.25.0-4.el9.aarch64.rpm	53f504616e01f5b67d4c376f12ec8f22b71179d2d0980c2dbb254b826ed1ec05	-	ol9_aarch64_u7_baseos_base
Oracle Linux 9 (x86_64)	opencryptoki-3.25.0-4.el9.src.rpm	e77fa5c4fa557a875645df76d820a537c61dce79fc8c8134a02ee9483d1eec55	-	ol9_x86_64_baseos_latest
	opencryptoki-3.25.0-4.el9.src.rpm	e77fa5c4fa557a875645df76d820a537c61dce79fc8c8134a02ee9483d1eec55	-	ol9_x86_64_codeready_builder
	opencryptoki-3.25.0-4.el9.src.rpm	e77fa5c4fa557a875645df76d820a537c61dce79fc8c8134a02ee9483d1eec55	-	ol9_x86_64_u7_baseos_base
	opencryptoki-3.25.0-4.el9.x86_64.rpm	0de3db31c89e4f3e9a905bf35a7fdd2736272df705ab4e1d1e3ff886c30e54fb	-	ol9_x86_64_baseos_latest
	opencryptoki-3.25.0-4.el9.x86_64.rpm	0de3db31c89e4f3e9a905bf35a7fdd2736272df705ab4e1d1e3ff886c30e54fb	-	ol9_x86_64_u7_baseos_base
	opencryptoki-ccatok-3.25.0-4.el9.x86_64.rpm	8de98885c99115eca59b0aa565fbcd88398b87c0de9f547d2367d251279c821c	-	ol9_x86_64_baseos_latest
	opencryptoki-ccatok-3.25.0-4.el9.x86_64.rpm	8de98885c99115eca59b0aa565fbcd88398b87c0de9f547d2367d251279c821c	-	ol9_x86_64_u7_baseos_base
	opencryptoki-devel-3.25.0-4.el9.i686.rpm	0bb0fd77b3814a62a72e3d48734dbae6380c356088373793419a33caceb800f1	-	ol9_x86_64_codeready_builder
	opencryptoki-devel-3.25.0-4.el9.x86_64.rpm	ef6b16f4109bc8a8cf62c7ee3d7b98f2db4aec4fa130a24d20035a2a035450da	-	ol9_x86_64_codeready_builder
	opencryptoki-icsftok-3.25.0-4.el9.x86_64.rpm	5761e9b7ae517a9277576b86dee39dd7d62c7dcc6bca192af821bb97acab7e5d	-	ol9_x86_64_baseos_latest
	opencryptoki-icsftok-3.25.0-4.el9.x86_64.rpm	5761e9b7ae517a9277576b86dee39dd7d62c7dcc6bca192af821bb97acab7e5d	-	ol9_x86_64_u7_baseos_base
	opencryptoki-libs-3.25.0-4.el9.i686.rpm	346708c828aebcfa58f0f4661aab35ccaf5117b19472bfbeb8f637189d703c22	-	ol9_x86_64_baseos_latest
	opencryptoki-libs-3.25.0-4.el9.i686.rpm	346708c828aebcfa58f0f4661aab35ccaf5117b19472bfbeb8f637189d703c22	-	ol9_x86_64_u7_baseos_base
	opencryptoki-libs-3.25.0-4.el9.x86_64.rpm	53d544882c98ff254e4a0eb8351167e18d0bd202d4216c0adfd51d84dc34e55a	-	ol9_x86_64_baseos_latest
	opencryptoki-libs-3.25.0-4.el9.x86_64.rpm	53d544882c98ff254e4a0eb8351167e18d0bd202d4216c0adfd51d84dc34e55a	-	ol9_x86_64_u7_baseos_base
	opencryptoki-swtok-3.25.0-4.el9.x86_64.rpm	bb71670f0b21619b3273957c81ef31019d8be1104368863784bbead10f777086	-	ol9_x86_64_baseos_latest
	opencryptoki-swtok-3.25.0-4.el9.x86_64.rpm	bb71670f0b21619b3273957c81ef31019d8be1104368863784bbead10f777086	-	ol9_x86_64_u7_baseos_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team