CVE ID:	CVE-2024-0914
Description:	A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2024.0152   1.3.6.1.4.1.25623.1.0.856113   1.3.6.1.4.1.25623.1.1.4.2024.2298.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2024-0914 RHBZ#2260407 https://bugzilla.redhat.com/show_bug.cgi?id=2260407 RHSA-2024:1239 https://access.redhat.com/errata/RHSA-2024:1239 RHSA-2024:1411 https://access.redhat.com/errata/RHSA-2024:1411 RHSA-2024:1608 https://access.redhat.com/errata/RHSA-2024:1608 RHSA-2024:1856 https://access.redhat.com/errata/RHSA-2024:1856 RHSA-2024:1992 https://access.redhat.com/errata/RHSA-2024:1992 https://access.redhat.com/security/cve/CVE-2024-0914 https://access.redhat.com/security/cve/CVE-2024-0914 https://people.redhat.com/~hkario/marvin/ https://people.redhat.com/~hkario/marvin/