Red Hat Product Errata RHSA-2026:36717 - Security Advisory Issued: 2026-07-08 Updated: 2026-07-08 RHSA-2026:36717 - Security Advisory Overview Updated Packages Synopsis Moderate: opencryptoki security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for opencryptoki is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2459076 - CVE-2026-40253 openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects CVEs CVE-2026-40253 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM opencryptoki-3.24.0-5.el9_6.2.src.rpm SHA-256: 0c5c065ad2ddacc81aad943ac1976bc2ab14f3705a21756ccf78184d440e214b x86_64 opencryptoki-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 5c6b1d922469690c2fef92afd288111617584d8b861f2ce48026ffa6595b3793 opencryptoki-ccatok-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 880d4a8c296fe155dcfbd8112fb6349111d1e225f9afb6f5708f7b3616714120 opencryptoki-ccatok-debuginfo-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: ebd49c7eb605814eb978e6760333acbb7334b152b0b7cf30c0cd31e9f183b92d opencryptoki-debuginfo-3.24.0-5.el9_6.2.i686.rpm SHA-256: 6f34d8a5c460bad3601d006a5b11147ede3887254cd084b9b6efbed2574d208a opencryptoki-debuginfo-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: c0b11b77c27c8fbca55a944ae1cfd6abd11994f5998ce5c22b642c04aa0cd590 opencryptoki-debugsource-3.24.0-5.el9_6.2.i686.rpm SHA-256: 67bdcd0f7c1ebbcf0895c50308f7cb2f65bea73b2d9904fdb17de01ac6edc0b7 opencryptoki-debugsource-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 33b3b25f3b7f0be7056f3ac801a5dec39c271208fafc615cc67e85d3e5153629 opencryptoki-icsftok-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: eb77852bb06bfd37d93f4cae4deb26ed53ee292c22072d62d6e5e7f0b0571dd8 opencryptoki-icsftok-debuginfo-3.24.0-5.el9_6.2.i686.rpm SHA-256: 98ee9c6f47d905547eba6b07fc0cba71e613c5dd75d7d2d5689e2345f8949267 opencryptoki-icsftok-debuginfo-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 32d24d8ba9070525a63932eb05d5cc3fbac54fd4987a79b1b9aa9dacf157b7b3 opencryptoki-libs-3.24.0-5.el9_6.2.i686.rpm SHA-256: e3ebb3ffc9546a2bcb9b047e574aab1ac677f18015e91747fa43984385cf621c opencryptoki-libs-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 4d9d81e2fb3246b0ed68586862e5ef79b31412aa2265c38b13b099c60f685caa opencryptoki-libs-debuginfo-3.24.0-5.el9_6.2.i686.rpm SHA-256: 42c6aca90b4ee31c347d064fc6440f454b48929f72eb1d37c8dbc55b7a737f44 opencryptoki-libs-debuginfo-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 38b93e7f65901584eb505d97907aa462bf94c8f4863e1bd9054f6917649548bd opencryptoki-swtok-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: c98d4b3968452ce7055f0468a03f8ebc9bd0852e85ff60e0827cae3de0339e52 opencryptoki-swtok-debuginfo-3.24.0-5.el9_6.2.i686.rpm SHA-256: a84039786d0dac46b6a565d1700a48230970b5f5c8bfd8d3a6e83681dce3e93d opencryptoki-swtok-debuginfo-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 004d8b2e46e8ddb1282126574b26ab7b76ce6349d5e2717ea9347918bf68c393 Red Hat Enterprise Linux Server - AUS 9.6 SRPM opencryptoki-3.24.0-5.el9_6.2.src.rpm SHA-256: 0c5c065ad2ddacc81aad943ac1976bc2ab14f3705a21756ccf78184d440e214b x86_64 opencryptoki-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 5c6b1d922469690c2fef92afd288111617584d8b861f2ce48026ffa6595b3793 opencryptoki-ccatok-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 880d4a8c296fe155dcfbd8112fb6349111d1e225f9afb6f5708f7b3616714120 opencryptoki-ccatok-debuginfo-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: ebd49c7eb605814eb978e6760333acbb7334b152b0b7cf30c0cd31e9f183b92d opencryptoki-debuginfo-3.24.0-5.el9_6.2.i686.rpm SHA-256: 6f34d8a5c460bad3601d006a5b11147ede3887254cd084b9b6efbed2574d208a opencryptoki-debuginfo-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: c0b11b77c27c8fbca55a944ae1cfd6abd11994f5998ce5c22b642c04aa0cd590 opencryptoki-debugsource-3.24.0-5.el9_6.2.i686.rpm SHA-256: 67bdcd0f7c1ebbcf0895c50308f7cb2f65bea73b2d9904fdb17de01ac6edc0b7 opencryptoki-debugsource-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 33b3b25f3b7f0be7056f3ac801a5dec39c271208fafc615cc67e85d3e5153629 opencryptoki-icsftok-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: eb77852bb06bfd37d93f4cae4deb26ed53ee292c22072d62d6e5e7f0b0571dd8 opencryptoki-icsftok-debuginfo-3.24.0-5.el9_6.2.i686.rpm SHA-256: 98ee9c6f47d905547eba6b07fc0cba71e613c5dd75d7d2d5689e2345f8949267 opencryptoki-icsftok-debuginfo-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 32d24d8ba9070525a63932eb05d5cc3fbac54fd4987a79b1b9aa9dacf157b7b3 opencryptoki-libs-3.24.0-5.el9_6.2.i686.rpm SHA-256: e3ebb3ffc9546a2bcb9b047e574aab1ac677f18015e91747fa43984385cf621c opencryptoki-libs-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 4d9d81e2fb3246b0ed68586862e5ef79b31412aa2265c38b13b099c60f685caa opencryptoki-libs-debuginfo-3.24.0-5.el9_6.2.i686.rpm SHA-256: 42c6aca90b4ee31c347d064fc6440f454b48929f72eb1d37c8dbc55b7a737f44 opencryptoki-libs-debuginfo-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 38b93e7f65901584eb505d97907aa462bf94c8f4863e1bd9054f6917649548bd opencryptoki-swtok-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: c98d4b3968452ce7055f0468a03f8ebc9bd0852e85ff60e0827cae3de0339e52 opencryptoki-swtok-debuginfo-3.24.0-5.el9_6.2.i686.rpm SHA-256: a84039786d0dac46b6a565d1700a48230970b5f5c8bfd8d3a6e83681dce3e93d opencryptoki-swtok-debuginfo-3.24.0-5.el9_6.2.x86_64.rpm SHA-256: 004d8b2e46e8ddb1282126574b26ab7b76ce6349d5e2717ea9347918bf68c393 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM opencryptoki-3.24.0-5.el9_6.2.src.rpm SHA-256: 0c5c065ad2ddacc81aad943ac1976bc2ab14f3705a21756ccf78184d440e214b s390x opencryptoki-3.24.0-5.el9_6.2.s390x.rpm SHA-256: 888119a6a436f6811e7d23c241d607997e63a64f5d81069677f506c19e7f6650 opencryptoki-ccatok-3.24.0-5.el9_6.2.s390x.rpm SHA-256: fd169f7f003244bcb256a5ec69ab1a63eba646bd66870a4e5216f0a9b93a230e opencryptoki-ccatok-debuginfo-3.24.0-5.el9_6.2.s390x.rpm SHA-256: 8b0819e45a5f0811441d1d0f73184b84256545bd4c651d2579673c284b1fcda2 opencryptoki-debuginfo-3.24.0-5.el9_6.2.s390x.rpm SHA-256: be905e4d528622308230d167ca0c56804b92e0f315f38f96f1dada63654f6ae9 opencryptoki-debugsource-3.24.0-5.el9_6.2.s390x.rpm SHA-256: 294f610a6b04fe1c61ca6ed6504ffb193cf9d42a2d9bdd4355a0029f39bce796 opencryptoki-ep11tok-3.24.0-5.el9_6.2.s390x.rpm SHA-256: 014a2e34137df0672d248048881d14ed77b2de9a0325f7128da6b15ded7f69e1 opencryptoki-ep11tok-debuginfo-3.24.0-5.el9_6.2.s390x.rpm SHA-256: d5099745181bb245fc0c2438e1e0216e8a628dc1dd59e54b4ae7ab1fd6457dc4 opencryptoki-icatok-3.24.0-5.el9_6.2.s390x.rpm SHA-256: c08c30cd44b039315c76a75efe14abaa71132c2b885149092603193e8e940188 opencryptoki-icatok-debuginfo-3.24.0-5.el9_6.2.s390x.rpm SHA-256: 4e4052a05af8a1194478f6a6d637d1ebafd61d99c88158f203cd8498dcbcf819 opencryptoki-icsftok-3.24.0-5.el9_6.2.s390x.rpm SHA-256: 860b6d4071502d3ab0ec29fe6718cd9477b7a731c2dcb946f32f1e8d17b614a4 opencryptoki-icsftok-debuginfo-3.24.0-5.el9_6.2.s390x.rpm SHA-256: 07b28430b752e3b7cba0941baadf30c2b4d1a3359e3117b0096368db768407c2 opencryptoki-libs-3.24.0-5.el9_6.2.s390x.rpm SHA-256: 44714497bba3f5baa42ecece7133ab49fc81300484b8d28c0829709f6698181c opencryptoki-libs-debuginfo-3.24.0-5.el9_6.2.s390x.rpm SHA-256: cffed9238