Red Hat Product Errata RHSA-2026:28231 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-23 RHSA-2026:28231 - Security Advisory Overview Updated Packages Synopsis Moderate: opencryptoki security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for opencryptoki is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2459076 - CVE-2026-40253 openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects CVEs CVE-2026-40253 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM opencryptoki-3.26.0-3.el10_2.1.src.rpm SHA-256: 4ad9229191dfd56b853bc4fc7ace01c9354921c0c6314040e73b5c7e7981042b x86_64 opencryptoki-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 9c6c4c5af993d5a78da48130901e671d67b89923ac1002eb030ad2e3bff426e0 opencryptoki-ccatok-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 67ab602d922c9eec786d6d1d23def5c5640a082e272277da3ea41249e8f4cf22 opencryptoki-ccatok-debuginfo-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 419078878ec2e9f839142bc34d8b166b362f2535d3740016e45a09f1feba2416 opencryptoki-debuginfo-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: f639c614fa95efd31adc0c01266acd688f72e63ce00824dd97f6bf359c0ea74c opencryptoki-debugsource-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: a3ea4e03859270f9218004f31d77e537fb873d3bec0c5771e0aa5ac3e310c3c5 opencryptoki-icsftok-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 18aef9812450629fc14bce2843c23997fcc869a93d19126f87833ec8c1166f34 opencryptoki-icsftok-debuginfo-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 7bfdfb6a6ad71a146b1bb7d0c8d9416994bfe8b22f586fa35a03910cd5ff3431 opencryptoki-libs-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: b877f98dd234592b371ca6e0bd60ee72c8ce566c31e2eca63c07f9584cbbc3d7 opencryptoki-libs-debuginfo-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 3d491087082f0c006f9e5b77f930d4cd2a109fe9d29d1924786a5fe26b756116 opencryptoki-swtok-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 7b62f8e511c7e79993a7c7f1d58c5a058226751cea780211b1de2df4e2ba81ff opencryptoki-swtok-debuginfo-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: fd081f40a3d20dd8d49a999528314f9251d592db35868f42572ece2726aaa7d0 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM opencryptoki-3.26.0-3.el10_2.1.src.rpm SHA-256: 4ad9229191dfd56b853bc4fc7ace01c9354921c0c6314040e73b5c7e7981042b x86_64 opencryptoki-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 9c6c4c5af993d5a78da48130901e671d67b89923ac1002eb030ad2e3bff426e0 opencryptoki-ccatok-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 67ab602d922c9eec786d6d1d23def5c5640a082e272277da3ea41249e8f4cf22 opencryptoki-ccatok-debuginfo-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 419078878ec2e9f839142bc34d8b166b362f2535d3740016e45a09f1feba2416 opencryptoki-debuginfo-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: f639c614fa95efd31adc0c01266acd688f72e63ce00824dd97f6bf359c0ea74c opencryptoki-debugsource-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: a3ea4e03859270f9218004f31d77e537fb873d3bec0c5771e0aa5ac3e310c3c5 opencryptoki-icsftok-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 18aef9812450629fc14bce2843c23997fcc869a93d19126f87833ec8c1166f34 opencryptoki-icsftok-debuginfo-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 7bfdfb6a6ad71a146b1bb7d0c8d9416994bfe8b22f586fa35a03910cd5ff3431 opencryptoki-libs-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: b877f98dd234592b371ca6e0bd60ee72c8ce566c31e2eca63c07f9584cbbc3d7 opencryptoki-libs-debuginfo-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 3d491087082f0c006f9e5b77f930d4cd2a109fe9d29d1924786a5fe26b756116 opencryptoki-swtok-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: 7b62f8e511c7e79993a7c7f1d58c5a058226751cea780211b1de2df4e2ba81ff opencryptoki-swtok-debuginfo-3.26.0-3.el10_2.1.x86_64.rpm SHA-256: fd081f40a3d20dd8d49a999528314f9251d592db35868f42572ece2726aaa7d0 Red Hat Enterprise Linux for IBM z Systems 10 SRPM opencryptoki-3.26.0-3.el10_2.1.src.rpm SHA-256: 4ad9229191dfd56b853bc4fc7ace01c9354921c0c6314040e73b5c7e7981042b s390x opencryptoki-3.26.0-3.el10_2.1.s390x.rpm SHA-256: b5b22806db8ae80e965ba8ea06bbba1e100f85a747f71a1607a9da7e9eab44bf opencryptoki-ccatok-3.26.0-3.el10_2.1.s390x.rpm SHA-256: ae98ddbec19daa05af7d1651f0ed8d37079536fe906817cd47fa234f0d9212d1 opencryptoki-ccatok-debuginfo-3.26.0-3.el10_2.1.s390x.rpm SHA-256: 9a5ab7605c71b6759fc171a26e8b9341cde6d301f75706208ee719284bb8b4a3 opencryptoki-debuginfo-3.26.0-3.el10_2.1.s390x.rpm SHA-256: 54120d3046d36517a83c13afd257527719870545ad9429cad8c73d21570281b1 opencryptoki-debugsource-3.26.0-3.el10_2.1.s390x.rpm SHA-256: bc70229508df92426ea27ff9076c2da371eedebcabe5f9d6d04adaa0818c0b48 opencryptoki-ep11tok-3.26.0-3.el10_2.1.s390x.rpm SHA-256: af0edbdbfca87abbbff6c4d35f5f75843aef1328949ecfee97f0797ac312eb15 opencryptoki-ep11tok-debuginfo-3.26.0-3.el10_2.1.s390x.rpm SHA-256: 514b643d0d9a3b590dfff8682f86ab081a86daca8755350133869bdf21686d8c opencryptoki-icatok-3.26.0-3.el10_2.1.s390x.rpm SHA-256: 25fa00f221506a0c7513ba9ce4dd7153800237b523cc63acf924f2a924ca4eb7 opencryptoki-icatok-debuginfo-3.26.0-3.el10_2.1.s390x.rpm SHA-256: ffb8b63f4a706402e407655a8cef952433a486ab1d6e9b5c7603ae294b0d09aa opencryptoki-icsftok-3.26.0-3.el10_2.1.s390x.rpm SHA-256: fb8d097eae4b8a91276443c260b4b60d1b4f21196143c75cccadc641b8340eb4 opencryptoki-icsftok-debuginfo-3.26.0-3.el10_2.1.s390x.rpm SHA-256: b71d2b11ef2f06522e41c572fd41378e0e32be130bab311f63c2689260c89ca1 opencryptoki-libs-3.26.0-3.el10_2.1.s390x.rpm SHA-256: 3c5ac1ff2a59ecb98ae5b5dc141d3b855f33e4968e03c0734af00b0ab80eb906 opencryptoki-libs-debuginfo-3.26.0-3.el10_2.1.s390x.rpm SHA-256: 1f6b866f3300ed5b6cc2f29369e679d0af89972e30a883363326788f56df6d3e opencryptoki-swtok-3.26.0-3.el10_2.1.s390x.rpm SHA-256: 4bb15538ed00ea61f9ec08fb355cfc7b55feb8890b24aa22cf751dcffbeef6a0 opencryptoki-swtok-debuginfo-3.26.0-3.el10_2.1.s390x.rpm SHA-256: f1f8aecc7ad41fc899b8a8183320e8879ee37fb452f0badf60b2286585fae367 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM opencryptoki-3.26.0-3.el10_2.1.src.rpm SHA-256: 4ad9229191dfd56b853bc4fc7ace01c9354921c0c6314040e73b5c7e7981042b s390x opencryptoki-3.26.0-3.el10_2.1.s390x.rpm SHA-256: b5b22806db8ae80e965ba8ea06bbba1e100f85a747f71a1607a9da7e9eab44bf opencryptoki-ccatok-3.26.0-3.el10_2.1.s390x.rpm SHA-256: ae98ddbec19daa05af7d1651f0ed8d37079536fe906817cd47fa234f0d9212d1 opencryptoki-ccatok-debuginfo-3.26.0-3.el10_2.1.s390x.rpm SHA-256: 9a5ab7605c71b6759fc171a26e8b9341cde6d301f75706208ee719284bb8b4a3 opencryptoki-debuginfo-3.26.0-3.el10_2.1.s390x.rpm SHA-256: 54120d3046d36517a83c13afd257527719870545ad9429cad8c73d21570281b1 opencryptoki-debugsource-3.26.0-3.el10_2.1.s390x.rpm SHA-256: bc70229508df92426ea27ff9076c2da371eedebcabe5f9d6d04adaa0818c0b48 opencryptoki-ep