Red Hat Product Errata RHSA-2026:28256 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-23 RHSA-2026:28256 - Security Advisory Overview Updated Packages Synopsis Moderate: opencryptoki security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for opencryptoki is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2459076 - CVE-2026-40253 openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects CVEs CVE-2026-40253 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM opencryptoki-3.26.0-2.el9_8.2.src.rpm SHA-256: f49264d662ef59e385b6ea31a17a8a4d08e51d055c2a7121ce54f8a068a7b213 x86_64 opencryptoki-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: bacda84648309485739ef2a0ca7008badc1c70fae9f94916c57183d884ae93bc opencryptoki-ccatok-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: c15b0e766bc7bb4dbb9ba1d6dc89f7e6d3c8a5017fac2c06fa05006bb6569916 opencryptoki-ccatok-debuginfo-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: ee1eebfdb2e5ba79e1646a746ffcb4a9a51dd8a7431c146799c9ff6c1184c062 opencryptoki-debuginfo-3.26.0-2.el9_8.2.i686.rpm SHA-256: 5617613853a5b64b1177c4caa64dbdbe276ea34fc709b3d92319b90520fba866 opencryptoki-debuginfo-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: 219405e684cf61d0c483d69556bfd50a4b9b5a11686d171cdc1e3b45d6da23ea opencryptoki-debugsource-3.26.0-2.el9_8.2.i686.rpm SHA-256: 280e2076bfa07c12fae42ba4ad206d9383dcd3bf2c3161e11364afd60fa1075b opencryptoki-debugsource-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: 2accc2d0548cc57531d1c0c436499fcc1e223aa40643b4e6303706aeea7849bc opencryptoki-icsftok-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: 4e7151b80a2bcf81c346df318d88b461058a351e3209756a684f3351f0c747bc opencryptoki-icsftok-debuginfo-3.26.0-2.el9_8.2.i686.rpm SHA-256: c3179281aebdefba5f344bd5ef957242aa2251d6d272f9d21232cf997db0b9cd opencryptoki-icsftok-debuginfo-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: dc72743794441cdbc95a47fe2fb566924008c0fa9bf7f31ebe6295f6c03dd0bd opencryptoki-libs-3.26.0-2.el9_8.2.i686.rpm SHA-256: 6d389c79af061f634eac2c39c45838765a4b086b85601747089d230ec80b6087 opencryptoki-libs-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: e977783f0f165fe0f8ed3941066d62ab776014fdf2a306f91238ea2d700ab8a5 opencryptoki-libs-debuginfo-3.26.0-2.el9_8.2.i686.rpm SHA-256: 832d859183f03c880732ec1c9755670fe97a33cd640c29e00db42718ab3387ff opencryptoki-libs-debuginfo-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: 87dc66f47f3b0c9a593e2890e176709d425d0453627060d4c7b6aa1369aabdaf opencryptoki-swtok-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: 63627cbbb6df58ee2ca6012c4c49919ed775c91fabe8ca3f1c7a6bce2b56a5fe opencryptoki-swtok-debuginfo-3.26.0-2.el9_8.2.i686.rpm SHA-256: 1cddf537e1784f7977299d9bf1609f37301b8a4678789966ed00eb0989058b14 opencryptoki-swtok-debuginfo-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: bb24e4420f7e0e29e5317e9604a806a89479678b750e8da890728f765701c52e Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM opencryptoki-3.26.0-2.el9_8.2.src.rpm SHA-256: f49264d662ef59e385b6ea31a17a8a4d08e51d055c2a7121ce54f8a068a7b213 x86_64 opencryptoki-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: bacda84648309485739ef2a0ca7008badc1c70fae9f94916c57183d884ae93bc opencryptoki-ccatok-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: c15b0e766bc7bb4dbb9ba1d6dc89f7e6d3c8a5017fac2c06fa05006bb6569916 opencryptoki-ccatok-debuginfo-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: ee1eebfdb2e5ba79e1646a746ffcb4a9a51dd8a7431c146799c9ff6c1184c062 opencryptoki-debuginfo-3.26.0-2.el9_8.2.i686.rpm SHA-256: 5617613853a5b64b1177c4caa64dbdbe276ea34fc709b3d92319b90520fba866 opencryptoki-debuginfo-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: 219405e684cf61d0c483d69556bfd50a4b9b5a11686d171cdc1e3b45d6da23ea opencryptoki-debugsource-3.26.0-2.el9_8.2.i686.rpm SHA-256: 280e2076bfa07c12fae42ba4ad206d9383dcd3bf2c3161e11364afd60fa1075b opencryptoki-debugsource-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: 2accc2d0548cc57531d1c0c436499fcc1e223aa40643b4e6303706aeea7849bc opencryptoki-icsftok-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: 4e7151b80a2bcf81c346df318d88b461058a351e3209756a684f3351f0c747bc opencryptoki-icsftok-debuginfo-3.26.0-2.el9_8.2.i686.rpm SHA-256: c3179281aebdefba5f344bd5ef957242aa2251d6d272f9d21232cf997db0b9cd opencryptoki-icsftok-debuginfo-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: dc72743794441cdbc95a47fe2fb566924008c0fa9bf7f31ebe6295f6c03dd0bd opencryptoki-libs-3.26.0-2.el9_8.2.i686.rpm SHA-256: 6d389c79af061f634eac2c39c45838765a4b086b85601747089d230ec80b6087 opencryptoki-libs-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: e977783f0f165fe0f8ed3941066d62ab776014fdf2a306f91238ea2d700ab8a5 opencryptoki-libs-debuginfo-3.26.0-2.el9_8.2.i686.rpm SHA-256: 832d859183f03c880732ec1c9755670fe97a33cd640c29e00db42718ab3387ff opencryptoki-libs-debuginfo-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: 87dc66f47f3b0c9a593e2890e176709d425d0453627060d4c7b6aa1369aabdaf opencryptoki-swtok-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: 63627cbbb6df58ee2ca6012c4c49919ed775c91fabe8ca3f1c7a6bce2b56a5fe opencryptoki-swtok-debuginfo-3.26.0-2.el9_8.2.i686.rpm SHA-256: 1cddf537e1784f7977299d9bf1609f37301b8a4678789966ed00eb0989058b14 opencryptoki-swtok-debuginfo-3.26.0-2.el9_8.2.x86_64.rpm SHA-256: bb24e4420f7e0e29e5317e9604a806a89479678b750e8da890728f765701c52e Red Hat Enterprise Linux for IBM z Systems 9 SRPM opencryptoki-3.26.0-2.el9_8.2.src.rpm SHA-256: f49264d662ef59e385b6ea31a17a8a4d08e51d055c2a7121ce54f8a068a7b213 s390x opencryptoki-3.26.0-2.el9_8.2.s390x.rpm SHA-256: b9d8ccdb2e80af5c8f0335a965bcc4679aa9c4233f286715ca2247f3c25f90c0 opencryptoki-ccatok-3.26.0-2.el9_8.2.s390x.rpm SHA-256: 3e52299647b4ceb6e35eb3c8ba1ff7176de8efade81f63fd1f165a5cfdfdd39f opencryptoki-ccatok-debuginfo-3.26.0-2.el9_8.2.s390x.rpm SHA-256: 0e4f01a611d20da72dba7be3b2b71ef4fbc2bb6c74b905076a6251d10e7b8e48 opencryptoki-debuginfo-3.26.0-2.el9_8.2.s390x.rpm SHA-256: 173a41c02288ae9e39397a8951c434e8cb70e74ae5e11c1e869102e0c3ff1a72 opencryptoki-debugsource-3.26.0-2.el9_8.2.s390x.rpm SHA-256: d9f126c83e4fabd8d35d8c73b3de1b32e8e588656ed242f13a814a4e033c4cac opencryptoki-ep11tok-3.26.0-2.el9_8.2.s390x.rpm SHA-256: b205830f464ec904d60cfda494e34e83f763e09f9a5dd4c1d8a59cb6a70ff002 opencryptoki-ep11tok-debuginfo-3.26.0-2.el9_8.2.s390x.rpm SHA-256: 2dd6b98c626215249cbedf034cb008712e7864e3cee36fbc156a02ed099656fb opencryptoki-icatok-3.26.0-2.el9_8.2.s390x.rpm SHA-256: c0655d4d741652c31abf3188f10c53a04c4366c8cc317ebdf6a39cdf61faa0f4 opencryptoki-icatok-debuginfo-3.26.0-2.el9_8.2.s390x.rpm SHA-256: 558b9337879fb1767eca921d5f92ca36f8ff341f762233f05af0e7f04a9c2e78 opencryptoki-icsftok-3.26.0-2.el9_8.2.s390x.rpm SHA-256: fa768155aa0ec29ef772d7ec5d6ba18bcd4b8bad950fe339882665bd331f61b0