Skip to content
OpenAdvisories
Medium RHSA-2026:5587 1 CVE

Red Hat Security Advisory: opencryptoki security update

Published Mar 25, 2026 · Updated Jul 3, 2026

Ecosystem: Red Hat

Fixed packages 27

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-ccatok 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-ccatok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-debugsource 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-ep11tok 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-ep11tok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-icatok 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-icatok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-icsftok 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-icsftok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-libs 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-libs-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-swtok 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-swtok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-tpmtok 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::baseos opencryptoki-tpmtok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::crb opencryptoki-ccatok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::crb opencryptoki-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::crb opencryptoki-debugsource 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::crb opencryptoki-devel 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::crb opencryptoki-ep11tok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::crb opencryptoki-icatok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::crb opencryptoki-icsftok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::crb opencryptoki-libs-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::crb opencryptoki-swtok-debuginfo 0:3.22.0-3.el8_10.2
Red Hat · RHEL 8 enterprise_linux:8::crb opencryptoki-tpmtok-debuginfo 0:3.22.0-3.el8_10.2

Vulnerabilities 1

  • Medium 6.8
    CVE-2026-23893

    openCryptoki has improper link resolution before file access (link following)

    openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged contexts. A token-group user can redirect file operations to arbitrary filesystem targets by plan…

    opencryptoki opencryptoki opencryptoki opencryptoki Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2431909
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5587.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-23893
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23893
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23893
  • article
    https://github.com/opencryptoki/opencryptoki/commit/5e6e4b42f2b1fcc1e4ef1b920e463bfa55da8b45
  • article
    https://github.com/opencryptoki/opencryptoki/security/advisories/GHSA-j6c7-mvpx-jx5q