[ALSA-2026:28231] Moderate: opencryptoki security update
Type:
security
Severity:
moderate
Release date:
2026-08-13
Description:
The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): * openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 opencryptoki-libs-3.26.0-3.el10_2.1.aarch64.rpm 60019c565c4cff0c0b557108385dff09cdc00a1702d94fa8601dddee92abbdc7
aarch64 opencryptoki-icsftok-3.26.0-3.el10_2.1.aarch64.rpm 97d1d4648aa026bd7f509e42f8c151be87d0d0c06d6095f68c4aa664053cd25e
aarch64 opencryptoki-devel-3.26.0-3.el10_2.1.aarch64.rpm e37bf6a87ab259fe9bbfdec4eeef8b32c26861c7c77e772776f95c095476c6c9
aarch64 opencryptoki-swtok-3.26.0-3.el10_2.1.aarch64.rpm ef6c9a5c189a2077a7ac9805a1ca1e64349e0a9bf245b997b4256afd243e9e74
aarch64 opencryptoki-3.26.0-3.el10_2.1.aarch64.rpm ff5d902a003006ec30fba178ed9af3575e287c071db3582a74c8ffd8bf8bd208
ppc64le opencryptoki-swtok-3.26.0-3.el10_2.1.ppc64le.rpm 0772162f34a112e5af73003a534d2c0d70d5d59651f46888937f67286d6d3a9d
ppc64le opencryptoki-3.26.0-3.el10_2.1.ppc64le.rpm 1c76d362a6e4ea12b234fe5a76689b1f08d6eeafd92d396c6a425c87f1b185d7
ppc64le opencryptoki-devel-3.26.0-3.el10_2.1.ppc64le.rpm 2be672203b246b6fcc1d6a8aae128adc107c255e3d93825f9c6ac3b29575f1a4
ppc64le opencryptoki-libs-3.26.0-3.el10_2.1.ppc64le.rpm 581f2da9e875b24cb8b28d8a44bd525fb0d2999fb5732668213b717303498db5
ppc64le opencryptoki-ccatok-3.26.0-3.el10_2.1.ppc64le.rpm 6c4f1c56afc4d6f83595988277d05005259a0de6ae3d5f5d0cbfea2064f9ae74
ppc64le opencryptoki-icsftok-3.26.0-3.el10_2.1.ppc64le.rpm fb07d213711897c06b121e79b0d1289521447992971cd0ac577172b77d85fed8
s390x opencryptoki-ep11tok-3.26.0-3.el10_2.1.s390x.rpm 15f0d3375b9e43abbd432376afba658e5f025b3561226c102c14715b9194981c
s390x opencryptoki-icatok-3.26.0-3.el10_2.1.s390x.rpm 2131e34a15d755c85770d718e3dc12e5042edcb7da215139c4136176a27911e2
s390x opencryptoki-libs-3.26.0-3.el10_2.1.s390x.rpm 48628d555fdd97379021b505da54087da7faebd4f8b77aa0dcea28d54a6667cb
s390x opencryptoki-devel-3.26.0-3.el10_2.1.s390x.rpm 6e2acd1e14f351654561da536388293251eb8bb84d19ea4d4793c202954783c2
s390x opencryptoki-swtok-3.26.0-3.el10_2.1.s390x.rpm 84f017d43df6dc49985bee36c88528dbe18ee2e1066d8631acb268d7affb199e
s390x opencryptoki-ccatok-3.26.0-3.el10_2.1.s390x.rpm a9a4fe45adffbddd6b93643b328abd70a5d6be9564dc7d2d009d1a9d99e290d5
s390x opencryptoki-icsftok-3.26.0-3.el10_2.1.s390x.rpm b20a508eca4e28c82e2a4d87ffbefc0f18acd1b10a66b348e625de86342c270a
s390x opencryptoki-3.26.0-3.el10_2.1.s390x.rpm dc062fb404bc7a1f35a34fef3a5d4819916ba11ed462bf56d094248cbbe7de3e
x86_64 opencryptoki-icsftok-3.26.0-3.el10_2.1.x86_64.rpm 3eb05ff6692afd062ebcb45bed75a3a0a8bbc2d7828dfe8009aa3682b4319fc9
x86_64 opencryptoki-swtok-3.26.0-3.el10_2.1.x86_64.rpm 68c9d0f0e6038a09c24b9c21760068efd6bb6a33436aa2084c43ac5a12d0c8da
x86_64 opencryptoki-devel-3.26.0-3.el10_2.1.x86_64.rpm 855fa6237225fe9c3f09dba8f17f27a819fc1dfe2a5d8180f9289e9b7f0805e1
x86_64 opencryptoki-ccatok-3.26.0-3.el10_2.1.x86_64.rpm 8d41aacccf7a4a4576651cd3b3d8782984c38e28f83cb3013c3334a695ebd6c7
x86_64 opencryptoki-3.26.0-3.el10_2.1.x86_64.rpm c8e5c51c4807d4d13519f18bd077b78b64771a0b67e878c0f5d931e90c13f0b9
x86_64 opencryptoki-libs-3.26.0-3.el10_2.1.x86_64.rpm eea963f4e7c5ed0510b0f58468287b881c3b53a39e6026160e0530050ababad0
x86_64_v2 opencryptoki-devel-3.26.0-3.el10_2.1.x86_64_v2.rpm 2b3c864ec3ca25581465281b4e0a62164515deb1c723921747bb42842df2f3e2
x86_64_v2 opencryptoki-ccatok-3.26.0-3.el10_2.1.x86_64_v2.rpm 73d6b381f17c5ca4ef585adcd9a8a2837b71f2696919b7a9dbcf09d63c33bb7a
x86_64_v2 opencryptoki-swtok-3.26.0-3.el10_2.1.x86_64_v2.rpm 8430a9c5f7c75b6e61d1cfed8a9d3fa06a6688061c83e7c6fe795946db943db5
x86_64_v2 opencryptoki-libs-3.26.0-3.el10_2.1.x86_64_v2.rpm 881747385c2ccf7efa43f6eeaae025d7581acc2f09e4c7d4dd2228b0a2958b55
x86_64_v2 opencryptoki-3.26.0-3.el10_2.1.x86_64_v2.rpm df9c19b8dae7d3101f374f0ed7c9a213ee46ea05f067edb7518d754cc4bb348a
x86_64_v2 opencryptoki-icsftok-3.26.0-3.el10_2.1.x86_64_v2.rpm e3e85e61c01389cda75329449b9444a711e6d92bc67254aa4825e364fe5ed1b6
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.