RHBA-2015:1278 - Bug Fix Advisory

Topic

Updated opencryptoki packages that fix several bugs and add various enhancements
are now available for Red Hat Enterprise Linux 6.

Description

The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented
for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages
includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11
firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM
eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z),
and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The
opencryptoki packages also bring a software token implementation that can be
used without any cryptographic hardware. These packages contain the Slot Daemon
(pkcsslotd) and general utilities.

The opencryptoki packages have been upgraded to upstream version 3.2, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#1148134)

This update also adds the following enhancements:

• This update enables Central Processors Assist for Cryptographic Functions

(CPACF) Message Security Assist 4 (MSA-4) extensions with new modes of operation
for opencryptoki on IBM System z. In addition, this hardware encryption improves
performance on machines z196 and later. (BZ#1148734)

• This update also implements an opencryptoki token for access to the Enterprise

PKCS#11 (EP11) features of the Crypto Express4S (CEX4S) adapter that implements
certified PKCS#11 mechanism on IBM System z. (BZ#11148133)

Users of opencryptoki are advised to upgrade to these updated packages, which
fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

CVEs

(none)

References

(none)