SUSE-SU-2026:0291-1

Details

This update for openCryptoki fixes the following issues:

CVE-2026-22791: Fixed supplying malformed compressed EC public key can lead to heap corruption or denial-of-service (bsc#1256673).

Affected Packages

openCryptoki

SUSE Linux Enterprise Module for Server Applications 15 SP7

Fixed in:

3.26.0-150700.5.9.1

openCryptoki-64bit

SUSE Linux Enterprise Module for Server Applications 15 SP7

Fixed in:

3.26.0-150700.5.9.1

openCryptoki-devel

SUSE Linux Enterprise Module for Server Applications 15 SP7

Fixed in:

3.26.0-150700.5.9.1

References