Red Hat Product Errata RHSA-2026:33519 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33519 - Security Advisory Overview Updated Packages Synopsis Moderate: opencryptoki security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for opencryptoki is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2459076 - CVE-2026-40253 openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects CVEs CVE-2026-40253 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM opencryptoki-3.22.0-3.el9_4.3.src.rpm SHA-256: a13f7b5d08130d5427df35afcfa3e936f7c82d17b90b7a49ebb61f3f9295fdcf x86_64 opencryptoki-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 167087d96f4d4fd3a018bb3860e1c5da612baa711fdb35e79245ef17f4dd7fa4 opencryptoki-debuginfo-3.22.0-3.el9_4.3.i686.rpm SHA-256: 09b702c726b9264fcda33173f630e717f2f549ad57a9d34bfcfd7104f025a809 opencryptoki-debuginfo-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 0c042004b535ed0d8a4d0b9eb1260b2392c70e2938ce456e3ebbd4ccaea85ac8 opencryptoki-debugsource-3.22.0-3.el9_4.3.i686.rpm SHA-256: f5f0ac16c63118884ddce22663a1e80cdb89611fa22378835198cf0c4ea82abe opencryptoki-debugsource-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 57d16fd18d01d50cba6be16c187d9a8229a6149f79595ba7cff192dc4c71bbca opencryptoki-icsftok-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 6e1fb7f2ccc82dbe6ac6b73f8b36af6b9b328329196264ce35e82ab2525f92f3 opencryptoki-icsftok-debuginfo-3.22.0-3.el9_4.3.i686.rpm SHA-256: 3fe9090858762c9827a7f8b5a39c402a5b5c7e89b333c391364e842b4abac438 opencryptoki-icsftok-debuginfo-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 5da2f4d913a8339da2a046c61dc431069dfc9e81a8afa8b3c0906de7db2a93dd opencryptoki-libs-3.22.0-3.el9_4.3.i686.rpm SHA-256: f8a377f31f97c093140c166e5e6f3d65b03e0f57b7f647f02835c55b4551e8aa opencryptoki-libs-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 2ed1a87840b50fe9c632dd8b14a795b1ff028620a4919333452d10739ab7709d opencryptoki-libs-debuginfo-3.22.0-3.el9_4.3.i686.rpm SHA-256: 208b8799076115e5cfee4566a95e3ba0a8f81d273c67bbdf01c5156248b73fde opencryptoki-libs-debuginfo-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: ad415b077df956f79b044544c37460fd3d185d174a5b123d5e293fe9a5c0a222 opencryptoki-swtok-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 78d54a86f397652ce9e2c96fe155c6042547b9ad511c83b2cda049d9b15ff8a3 opencryptoki-swtok-debuginfo-3.22.0-3.el9_4.3.i686.rpm SHA-256: d89653ccddd599d53df939a766c128f4cbef91a5fe9d68fbea1105fd33933998 opencryptoki-swtok-debuginfo-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: b5444a037f0f28963fd5fe27f27becf9f3ac8188ad0afe71fa1405ed8e9f76ea Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM opencryptoki-3.22.0-3.el9_4.3.src.rpm SHA-256: a13f7b5d08130d5427df35afcfa3e936f7c82d17b90b7a49ebb61f3f9295fdcf ppc64le opencryptoki-3.22.0-3.el9_4.3.ppc64le.rpm SHA-256: 8a42a1da62d6672ffc481e205b65ad728e4b3226977147536852013f2d0959b6 opencryptoki-debuginfo-3.22.0-3.el9_4.3.ppc64le.rpm SHA-256: cbd604002bdc7e2ccd38c058212d344fdf21a7debdee94f03f51ccec0b2e2498 opencryptoki-debugsource-3.22.0-3.el9_4.3.ppc64le.rpm SHA-256: eff44b26a1167d61c4ff0cedcee37e6bdd7ebf33f9b29f12af7a90a018bc121f opencryptoki-icsftok-3.22.0-3.el9_4.3.ppc64le.rpm SHA-256: 54da36da31011295b30b2af99ac12be75353d32699f2159119318eab3e146ffc opencryptoki-icsftok-debuginfo-3.22.0-3.el9_4.3.ppc64le.rpm SHA-256: a10755770bdf86e256bb9505dba89f90871c05830bd87106a221d318c0d9c447 opencryptoki-libs-3.22.0-3.el9_4.3.ppc64le.rpm SHA-256: 823bb4a3b3bc646675158a7b3667d01381e3ce7a78891163656c6813a5d1a55f opencryptoki-libs-debuginfo-3.22.0-3.el9_4.3.ppc64le.rpm SHA-256: cb01eb5a6fd3ea2b0fc4527253a24b8a93cb0ab7d5d096806d113367e6babf8e opencryptoki-swtok-3.22.0-3.el9_4.3.ppc64le.rpm SHA-256: add537f69daa04ff1ef18cc65ac2c58be139b5dd950e99d68ffd64090a1303a0 opencryptoki-swtok-debuginfo-3.22.0-3.el9_4.3.ppc64le.rpm SHA-256: 0c0efa34cc22062c70cf87093c646a9d66d1e20cbc55023546cd7792287bccf8 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM opencryptoki-3.22.0-3.el9_4.3.src.rpm SHA-256: a13f7b5d08130d5427df35afcfa3e936f7c82d17b90b7a49ebb61f3f9295fdcf x86_64 opencryptoki-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 167087d96f4d4fd3a018bb3860e1c5da612baa711fdb35e79245ef17f4dd7fa4 opencryptoki-debuginfo-3.22.0-3.el9_4.3.i686.rpm SHA-256: 09b702c726b9264fcda33173f630e717f2f549ad57a9d34bfcfd7104f025a809 opencryptoki-debuginfo-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 0c042004b535ed0d8a4d0b9eb1260b2392c70e2938ce456e3ebbd4ccaea85ac8 opencryptoki-debugsource-3.22.0-3.el9_4.3.i686.rpm SHA-256: f5f0ac16c63118884ddce22663a1e80cdb89611fa22378835198cf0c4ea82abe opencryptoki-debugsource-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 57d16fd18d01d50cba6be16c187d9a8229a6149f79595ba7cff192dc4c71bbca opencryptoki-icsftok-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 6e1fb7f2ccc82dbe6ac6b73f8b36af6b9b328329196264ce35e82ab2525f92f3 opencryptoki-icsftok-debuginfo-3.22.0-3.el9_4.3.i686.rpm SHA-256: 3fe9090858762c9827a7f8b5a39c402a5b5c7e89b333c391364e842b4abac438 opencryptoki-icsftok-debuginfo-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 5da2f4d913a8339da2a046c61dc431069dfc9e81a8afa8b3c0906de7db2a93dd opencryptoki-libs-3.22.0-3.el9_4.3.i686.rpm SHA-256: f8a377f31f97c093140c166e5e6f3d65b03e0f57b7f647f02835c55b4551e8aa opencryptoki-libs-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 2ed1a87840b50fe9c632dd8b14a795b1ff028620a4919333452d10739ab7709d opencryptoki-libs-debuginfo-3.22.0-3.el9_4.3.i686.rpm SHA-256: 208b8799076115e5cfee4566a95e3ba0a8f81d273c67bbdf01c5156248b73fde opencryptoki-libs-debuginfo-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: ad415b077df956f79b044544c37460fd3d185d174a5b123d5e293fe9a5c0a222 opencryptoki-swtok-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: 78d54a86f397652ce9e2c96fe155c6042547b9ad511c83b2cda049d9b15ff8a3 opencryptoki-swtok-debuginfo-3.22.0-3.el9_4.3.i686.rpm SHA-256: d89653ccddd599d53df939a766c128f4cbef91a5fe9d68fbea1105fd33933998 opencryptoki-swtok-debuginfo-3.22.0-3.el9_4.3.x86_64.rpm SHA-256: b5444a037f0f28963fd5fe27f27becf9f3ac8188ad0afe71fa1405ed8e9f76ea Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM opencryptoki-3.22.0-3.el9_4.3.src.rpm SHA-256: a13f7b5d08130d5427df35afcfa3e936f7c82d17b90b7a49ebb61f3f9295fdcf aarch64 opencryptoki-3.22.0-3.el9_4.3.aarch64.rpm SHA-256: 9c20117f7142f7cd77111fd88565190ce92f4ab30ec1d59bf5d6281890cf87d1 opencryptoki-debuginfo-3.22.0-3.el9_4.3.aarch64.rpm SHA-256: caf758ca33b4c1fa80f28e7c6e2820c19c03a52151564344ad6e71c9f7ce4fe0 opencryptoki-debugsource-3.22.0-3.el9_4.3.aarch64.rpm SHA-256: 5ac3f4d90d3b18ce3b3ced260b2c41817f0aad71ebb853e727cff4822eab1577 opencryptoki-icsftok-3.22.0-3.el9_4.3.aarch64.rpm SHA-256: 5fbfe7343c91dad4dfb2f4ae77b01ba9633faf490f9f8d947cc4e366d00a4618 opencryptoki-icsftok-debuginfo-3.22.0-3.el9_4.3.aarch64.rpm SHA-256: 708d227facf8dfc2f8bc6a7b08633c24455bfb451c0e35ee8c2253e86febdd62 opencryptoki-libs-3.22.0-3.el9_4.3.aarch64.rpm SHA-256: 28a1588706a6e0e674934ff3d2b72804638dd04ade8fefc4ea9e0fc3bbd647f4 opencryptoki-libs-debuginfo-3.22.0-3.el9_4.3.aarch64.rpm SHA-256: b60d5d869aa623797d30a150a843d04d5b28b5b24250582cf2a63e53a6bed37f opencryptoki-swtok-3.22.0-3.el9_4.3.aarch64.rpm SHA-256: f81d89c1772cde3b1e2f43dd9f06b921e888ce11115cb6b77e9d53215e59eae7 opencryptoki-swtok-debuginfo-3.22.0-3.el9_4.3.aarch64.rpm SHA-256: 771b73f87071864f7257f82841b1438242f5ab19840ff9e386e305430cdf4ab1 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM opencryptoki-3.22.0-3.el9_4.3.src.rpm SHA-256: a13f7b5d08130d5427df35afcfa3e936f7c82d17b90b7a49ebb61f3f9295fdcf s390x opencryptoki-3.22.0-3.el9_4.3.s390x.rpm SHA-256: efc0