- 
    Mon Aug 11 2025 Than Ngo <than@redhat.com> - 3.22.0-3.1
    
- Resolves: RHEL-105918, fix for supporting CCA 8.4
   
  
  - 
    Fri Feb 16 2024 Than Ngo <than@redhat.com> - 3.22.0-3
    
- Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT
Related: RHEL-22791
   
  
  - 
    Thu Feb 08 2024 Than Ngo <than@redhat.com> - 3.22.0-2
    
- timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
Resolves: RHEL-22791
   
  
  - 
    Thu Nov 23 2023 Than Ngo <than@redhat.com> - 3.22.0-1
    
- Resolves: RHEL-11413, update to 3.22.0
   
  
  - 
    Tue Jul 18 2023 Than Ngo <than@redhat.com> - 3.21.0-9
    
- Resolves: #2223588, FTBFS
   
  
  - 
    Tue Jul 18 2023 Than Ngo <than@redhat.com> - 3.21.0-8
    
- Related: #2222595, add triggerun to reload daemon
   
  
  - 
    Fri Jul 14 2023 Than Ngo <than@redhat.com> - 3.21.0-7
    
- Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0
- Resolves: #2222594, p11sak fails as soon as there reside non-key objects
   
  
  - 
    Tue Jul 04 2023 Than Ngo <than@redhat.com> - 3.21.0-6
    
- add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1
Related: #2159741
   
  
  - 
    Tue Jun 13 2023 Than Ngo <than@redhat.com> - 3.21.0-5
    
- add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing
Related: #2159697
   
  
  - 
    Thu May 25 2023 Than Ngo <than@redhat.com> - 3.21.0-4
    
- add verify attributes for opencryptoki.conf to ignore the verification
Related: #2159697