Red Hat Product Errata RHSA-2026:26352 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26352 - Security Advisory Overview Updated Packages Synopsis Moderate: opencryptoki security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for opencryptoki is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2459076 - CVE-2026-40253 openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects CVEs CVE-2026-40253 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM opencryptoki-3.22.0-3.el8_10.3.src.rpm SHA-256: ce986c27353b6a1d8eaa3f9804b3daa777c877f857b66df531b1be095b7f6e0f x86_64 opencryptoki-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: 9ae0e9b6566961700d1eed1b3e533cd29f123043902e6ad0a12d5236d3b361c9 opencryptoki-debuginfo-3.22.0-3.el8_10.3.i686.rpm SHA-256: a7e9dad89ac3ab8a7af2336376a2ff1aab7549b1544d09cf7238b96904665042 opencryptoki-debuginfo-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: 3bf0b3c99193805bc13588fed57abfc7b20c75ef34828bb084f38b779d2a5d5b opencryptoki-debugsource-3.22.0-3.el8_10.3.i686.rpm SHA-256: 8c63e15d901f2d51ed5ba19711b214909b6117c1d6f16ad49b9da1784f605c39 opencryptoki-debugsource-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: caac257b02e77780a8e9ce70cf91d7fe2051887071db85479b1b3b48d766f979 opencryptoki-icsftok-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: 4d62032b8c82200ebccc6e0e4b7d416b59dcd2ecf981437b267ad8fceb7a6fa1 opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.3.i686.rpm SHA-256: 7ad6f79c1fefc211321ccd78c734093045ccd1d354e5add440463334a2445d75 opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: eb98cdd8a9b41f5bc599b57dda0955aa325a257f6eab94eed01154f11fcb79c1 opencryptoki-libs-3.22.0-3.el8_10.3.i686.rpm SHA-256: 8906ac9ce6c38e1424d7fe75eac962ca2d0722edc9e9b5ce2f22305007966e99 opencryptoki-libs-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: 18a61c46444283f48c30f694c96c4a6b596c86ef431bc389789653411410bd29 opencryptoki-libs-debuginfo-3.22.0-3.el8_10.3.i686.rpm SHA-256: a3933ffafb97a1660b8a14b44d0d415b2171ed95eb295bd1a79df5af09713214 opencryptoki-libs-debuginfo-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: c7b489444a366bb435ebf60ce67b297820208debf877d39a8ca027114a45b883 opencryptoki-swtok-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: ae24a1a3b221f6d1840ed9331d966f23c8ac84e2eed6ae095eb10acef2c49438 opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.3.i686.rpm SHA-256: adfd554f29391f7fc65748223d4f057c172d384b7cae510ef292a2896e22bf54 opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: ec4ebc8a56b1b5c186f0668bb0d9e1da3044f914281f76465e32ba4e8b674838 opencryptoki-tpmtok-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: ee288fea98708f17ebbf0851e9abb108d501cc6e3b7b3d0b94fe596c151b1081 opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.3.i686.rpm SHA-256: 381f41ddfc4d0cd27b860718a5899b5a44baa3f430d5ba46a3199000a6a7ace7 opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.3.x86_64.rpm SHA-256: c1f2377b9c931d0172e1b9b2399c218d68adc76e15d56f80633b5f4a6f4f2512 Red Hat Enterprise Linux for IBM z Systems 8 SRPM opencryptoki-3.22.0-3.el8_10.3.src.rpm SHA-256: ce986c27353b6a1d8eaa3f9804b3daa777c877f857b66df531b1be095b7f6e0f s390x opencryptoki-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 3c4ea4dfcbb5eeaebfdd760648e760f09d2c6b00e50ac2d1c8b23107904e4ca3 opencryptoki-ccatok-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 6a711de97d7247fad666fd7fb54f0bd3e3107e1eaf9f88b0d96ba3fba20b7531 opencryptoki-ccatok-debuginfo-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 6aa12ce596110f5edd8205c7f6dcd150480e7c8d2ac0405cd9563d48d9fa5fa6 opencryptoki-debuginfo-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 865ed75a36709d26962ca4dc6501bfd39d308217905202c1fff59b7849efa1ca opencryptoki-debugsource-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 8a4d8e926e2166652fa77ff27917d401dff77a48c2b36c6a2c8d7624c1026b14 opencryptoki-ep11tok-3.22.0-3.el8_10.3.s390x.rpm SHA-256: a3fff66eef7c9d4140dfb0f978525340a69ecfb29d0c06bc732d930750b88575 opencryptoki-ep11tok-debuginfo-3.22.0-3.el8_10.3.s390x.rpm SHA-256: f0e07b078d47c6545f85a9a0f46a8a91b6ed44351ec48d031dc8b66dfa77560c opencryptoki-icatok-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 27c2b222716cf6bdd23e6268aaa5e9a2c72c2e1a7538d512ad0ed273ec68033a opencryptoki-icatok-debuginfo-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 4beed58bb7323ba0b38730766491909589b841e1c1eeb23624efe023b6314a6a opencryptoki-icsftok-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 9a6c391a4e49ba214d5aecc0e5f1b7813f799a5556bc8fad8d00ebccdcbba1f2 opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 539367f679670317c520e3212a7b6ff0c12c9de57443dd7de88fd311ae1ff471 opencryptoki-libs-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 14d2dad75c0390f36b4556cae9c3e0655ac5f4c4a47a53b31064b840370d1cd2 opencryptoki-libs-debuginfo-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 8021f234d8b9c8707d146d276806d4ab5243454d0cb142488ae833e3e712d534 opencryptoki-swtok-3.22.0-3.el8_10.3.s390x.rpm SHA-256: f92100451d8d5b60af01206eda9f6c651db269b193c892265d555b5bc9987c10 opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.3.s390x.rpm SHA-256: c6ff8d2fd2b4bc6c52ed34e0abef20078e2a21f9bf19f29dc2f74cb572c34950 opencryptoki-tpmtok-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 22ff15e54ef9752b260770a08502bc38c6ca69fca29f075607826b6be8b0bb0e opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.3.s390x.rpm SHA-256: 78247683c6b40a24da6fc80cb917c970d3bd4645fc00a2a63a8382f95299f1df Red Hat Enterprise Linux for Power, little endian 8 SRPM opencryptoki-3.22.0-3.el8_10.3.src.rpm SHA-256: ce986c27353b6a1d8eaa3f9804b3daa777c877f857b66df531b1be095b7f6e0f ppc64le opencryptoki-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: 23d1c9c2070f07cf8433950a2920a59b72e01735edc31841ee541b0b8415cf5b opencryptoki-debuginfo-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: 9e643ce0f5acc3036680cc24fae5b0dd7164e530c389c929c7ae413567c373a9 opencryptoki-debugsource-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: 02b7113280329452b7ee0b1b1d1661280318e5d98159dc8a19d3bb60935771cd opencryptoki-icsftok-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: 2981832da53ba57bfe96eec988ab4bf59fcef3c9321f20ff4c50bc460b21c080 opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: 86e26fe41866979acae18e2cf3d858fcc260df190e237df2f2f71dce6872885d opencryptoki-libs-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: b8cf1d530e092437db31b13a20e0c5070f29a9cb1126b3b86218662c4c1c7251 opencryptoki-libs-debuginfo-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: fd7b391fe4f878ca9599854a771cb06983d59b9e72b3fef101a7d56cc1375d19 opencryptoki-swtok-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: f637dbf2e4887847e379439bc1e2cf97ea29dff81b6bbb758d051668ce40b76c opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: 71fccba3fe8ce8a3e8f6520a3f9a40fa83c796669da8addfa51846f52403d032 opencryptoki-tpmtok-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: 32179c324856af09e5d69a0dde863fc9d24cb3e36af16304debfdae6f360fb88 opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.3.ppc64le.rpm SHA-256: db0b7b551fcdc5ae6f5dbc073ac18750776e1e448192adcba39fe34ad33c774f Red Hat Enterprise Linux for ARM 64 8 SRPM opencryptoki-3.22.0-3.el8_10.3.src.rpm SHA-256: ce986c27353b6a1d8eaa3f9804b3daa777c877f857b66df531b1be095b7f6e0f aarch64 opencryptoki-3.22.0-3.el8_10.3.aarch64.rpm SHA-256: 6b6969613231012356b1cf87ad9526c586c3de980cb3ccc1a3e1bd0e586bf61a opencryptoki-debuginfo-3.22.0-3.el8_10.3.aarch64.rpm SHA-256: 72b1bbec1c83b221dd695e539b95b258078a85a7e8389058a6d89d7c94af3081 opencryptoki-debugsource-3.22.0-3.el8_10.3.aarch64.rpm SHA-256: 1f0a907ef69b106581172df6741818050f7bb876874c474e27eebaa09bd22506 opencryptoki-icsftok-3.22.0-3.el8_10.3.aarch64.rpm SHA-256: cacc22bc3c7421cf642d8faf12999c436f4cfbdd17011cec6cea6b01d6d6c23d ope