Red Hat Product Errata RHSA-2026:36697 - Security Advisory Issued: 2026-07-08 Updated: 2026-07-08 RHSA-2026:36697 - Security Advisory Overview Updated Packages Synopsis Moderate: opencryptoki security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for opencryptoki is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2459076 - CVE-2026-40253 openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects CVEs CVE-2026-40253 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM opencryptoki-3.24.0-6.el10_0.2.src.rpm SHA-256: 99ce05cdfab9d793fd3e958722d272ff004cbbb64a86fd6ccbeb155dc2ed5726 x86_64 opencryptoki-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: b44359102881e3afefef469708859589f7e75d85c952d683c146e3ce77a5364a opencryptoki-ccatok-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: dbf186d8f56c77a0e37be2114b5ea5ae6717c05e0865db2aa5839e206579c8c9 opencryptoki-ccatok-debuginfo-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: 5dfe57552951e37cfd9690ff299454e0d1e5669458f27e933a8c1b930adff5d3 opencryptoki-debuginfo-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: 448282017674fb2f2665a4813480c54c84a02a7186a1184300d60978f710e478 opencryptoki-debugsource-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: aabcf9a13bf453d6864c3ede4a93e7154631385bd5d48856ca2eda062b67ee46 opencryptoki-icsftok-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: 8e5549dc8799bad7c1749e0434493feafbd74c611b2fb29e8a49fa2a8b15b63b opencryptoki-icsftok-debuginfo-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: e9894154e70e2fbce3a542aa70c90252df2cea28dff387c6912c9501912c918f opencryptoki-libs-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: f7abbf1242bd397163b05dff1c0a1f36097005ee4aebab18b7639798367eca8c opencryptoki-libs-debuginfo-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: 5ea25c76ccaa547043dd1133d84ff8dcd213adf1f74ac432fccedf14eb498733 opencryptoki-swtok-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: b0da34f231a35599e0c375e0a2840afa01c68a762b885a78a9acdd1545864ef1 opencryptoki-swtok-debuginfo-3.24.0-6.el10_0.2.x86_64.rpm SHA-256: 11073b5c4fd2d857d0ace14c7237e30b8d25875e1f31e2518ecbacc36917fc54 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM opencryptoki-3.24.0-6.el10_0.2.src.rpm SHA-256: 99ce05cdfab9d793fd3e958722d272ff004cbbb64a86fd6ccbeb155dc2ed5726 s390x opencryptoki-3.24.0-6.el10_0.2.s390x.rpm SHA-256: e33a4ae15d934a37a91989c33f36a2ddba22627079b7f89fc68219381c17e4b5 opencryptoki-ccatok-3.24.0-6.el10_0.2.s390x.rpm SHA-256: a85fa91a9249c25faeec4a2879eb1cd2c7118ab24c2eb2404a43425fbe3638e0 opencryptoki-ccatok-debuginfo-3.24.0-6.el10_0.2.s390x.rpm SHA-256: fad67617fc726ebac54e18aeca02b7b30644aeeac0496232db2ed7a714c190ea opencryptoki-debuginfo-3.24.0-6.el10_0.2.s390x.rpm SHA-256: d2f128774cd4162f60345472af17353e0d447c16b16033764921c55ab9a4c90b opencryptoki-debugsource-3.24.0-6.el10_0.2.s390x.rpm SHA-256: 3421706b8e1dc62955007557e6a4517a3d7af579a1209d30599d8241f1c3fa91 opencryptoki-ep11tok-3.24.0-6.el10_0.2.s390x.rpm SHA-256: ceafed3002c1c4354f49645f348ee271d4b59cdffb43b71ce465e372adf73e65 opencryptoki-ep11tok-debuginfo-3.24.0-6.el10_0.2.s390x.rpm SHA-256: 53ed80c8b4ccaa35bf0445840624c4fac3c3be61cd38a5e8f164cd7da2c2334e opencryptoki-icatok-3.24.0-6.el10_0.2.s390x.rpm SHA-256: 17a700599ce3b0a022d9161a2e34df093f4a07f31f9fe34da261b91a300f8f1e opencryptoki-icatok-debuginfo-3.24.0-6.el10_0.2.s390x.rpm SHA-256: fcf56fb70f0d8e206064834a123ab7913814255f95fc67d46bbdea26ba4f7091 opencryptoki-icsftok-3.24.0-6.el10_0.2.s390x.rpm SHA-256: fdcb88c932819eee6a6e4a1f225ca99febec89e3dfbd9cb57810035e7e5449fe opencryptoki-icsftok-debuginfo-3.24.0-6.el10_0.2.s390x.rpm SHA-256: 1bd4823427b661928960cc6d8331ab032598185cb111f8a5d886d2d96d4c0b54 opencryptoki-libs-3.24.0-6.el10_0.2.s390x.rpm SHA-256: 8ef6651dc5eb1a2e0d1cc75779ff45f0fc86df9c36d2e9d35764ceb8be2ee92f opencryptoki-libs-debuginfo-3.24.0-6.el10_0.2.s390x.rpm SHA-256: aa8ac53c96ae00125894498d902e6ec9e4c455afb496cef94b7ec6f0c99895eb opencryptoki-swtok-3.24.0-6.el10_0.2.s390x.rpm SHA-256: e030df73850535e34ad7b6ddc91b0f63359edfaaaaef3f2bdb14232f7c154c0d opencryptoki-swtok-debuginfo-3.24.0-6.el10_0.2.s390x.rpm SHA-256: 5387a3a2242c1ca12e2ec39cb08cf3462f0f3a835008ed134924562838aad869 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM opencryptoki-3.24.0-6.el10_0.2.src.rpm SHA-256: 99ce05cdfab9d793fd3e958722d272ff004cbbb64a86fd6ccbeb155dc2ed5726 ppc64le opencryptoki-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: 0d8554f1a037433a87a67f6dc4061e42896c906a048ac71338e625f1e0bbea37 opencryptoki-ccatok-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: 1dd541ad6477caf39c4ae391e6751e02263f7a27e29ccad76bfb75181e22c689 opencryptoki-ccatok-debuginfo-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: 6d3842e8b4aeab903e4f664d0463944d8a707bfacedbf0ecf8d9b95184132866 opencryptoki-debuginfo-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: e845539a297f13e0951748306ea6eea6c6445a4804ca1af36266238441dfe76d opencryptoki-debugsource-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: 07f71049b4a3d6c2494565dc68806a6620e018ebbd49b1157538942aacae7d4e opencryptoki-icsftok-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: 5ebc78743cd7aa2ee4bb20b2085c782d60f17db03187619c0c4786b717dfe833 opencryptoki-icsftok-debuginfo-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: f2112c6c2bfb2b58eadfeaaf8bdb7de148548055975349b1bab18dbf16dd8780 opencryptoki-libs-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: 4b03abca6d67e48dc628b9c6e0423a38aa7b7780af36cd9bca1c6ee859cb81e3 opencryptoki-libs-debuginfo-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: 26961899d8c2c87c3f45540ad3bc3cda91f8b5d7add5d5a353a92b5f8db922eb opencryptoki-swtok-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: 741f49455a3ac065d7ec9f4fdef74263570136434398d27e6cfe072b889833d6 opencryptoki-swtok-debuginfo-3.24.0-6.el10_0.2.ppc64le.rpm SHA-256: 94e2518a46b4f27deb274200ea2a343627a85084f7318057bebfe479db7d421a Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM opencryptoki-3.24.0-6.el10_0.2.src.rpm SHA-256: 99ce05cdfab9d793fd3e958722d272ff004cbbb64a86fd6ccbeb155dc2ed5726 aarch64 opencryptoki-3.24.0-6.el10_0.2.aarch64.rpm SHA-256: 747975f8a77c5631c28cc51176d508403e6628e3abc439f6c563c825c50ae78d opencryptoki-debuginfo-3.24.0-6.el10_0.2.aarch64.rpm SHA-256: 4e246271ef7bdb74fec0d3da97ccfff7bd1346eeb73ac199f32514e1dfc9fbc4 opencryptoki-debugsource-3.24.0-6.el10_0.2.aarch64.rpm SHA-256: aefc32ff2309b73a0ecbd0b4df18e1472863403bb28acf74e3cb42250e43b2e4 opencryptoki-icsftok-3.24.0-6.el10_0.2.aarch64.rpm SHA-256: eb30257029852c4389257767cd0a6e1997326ea6b7ceeb601036df86f384623f opencryptoki-icsftok-debuginfo-3.24.0-6.el10_0.2.aarch64.rpm SHA-256: 939badeb71c751b008de9cee8323f27768a9bc903e83cb651f4ca8474ba39eda opencryptoki-libs-3.24.0-6.el10_0.2.aarch64.rpm SHA-256: a889a6decf73afd4087f951fca227e5fa681255ec989dde42be49b360eaeedf3 opencryptoki-libs-debuginfo-3.24.0-6.el10_0.2.aarch64.rpm SHA-256: 5920983b6b1760a3fc8a3f8138735fcf304e50fed22a140498871672cbcbb009 opencryptoki-swtok-3.24.0-6.el10_0.2.aarch64.rpm SHA-256: 9f8463025e15792defdf0eb414218c6bc10a87520d715b618e4da72c09d3f4e9 opencryptoki-swtok-debuginfo-3.24.0-6.el10_0.2.aarch64.rpm SHA-256: 3287a8982708a472c92cb5b726be93513822831a62e09331f18157b4a425e351 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 SRPM x86_64 opencryptoki-ccatok-debuginfo-3.24.0-6.el10_0.