[ubuntu/noble-security] opencryptoki 3.23.0+dfsg-0ubuntu3.1 (Accepted)

[John Breton]

opencryptoki (3.23.0+dfsg-0ubuntu3.1) noble-security; urgency=medium

  * d/p/lp-2163181-cca-adjust-host-library-version-detection.patch: Fix
    CCA host library version detection for newer CCA versions, needed to
    support CCA 8.4; without it, the CCA host library version is reported
    as invalid. (LP: #2163181)
  * d/p/lp-2163253-fix-ber-der-decoder-out-of-bounds-access.patch: Fix
    possible out-of-bounds access in BER decode functions. (LP: #2163253)
    (CVE-2026-40253)
  * d/p/lp-2163254-fix-symlink-following-vulnerabilities.patch: Fix
    symlink-following vulnerabilities (CWE-59). (LP: #2163254)
    (CVE-2026-23893)

Date: 2026-08-26 15:02:12.211148+00:00
Changed-By: Frank Heimes <frank.heimes at canonical.com>
Signed-By: John Breton <john.breton at canonical.com>
https://launchpad.net/ubuntu/+source/opencryptoki/3.23.0+dfsg-0ubuntu3.1
-------------- next part --------------
Sorry, changesfile not available.