Red Hat Product Errata RHBA-2025:14559 - Bug Fix Advisory
Issued:
2025-08-26
Updated:
2025-08-26

RHBA-2025:14559 - Bug Fix Advisory

Synopsis

opencryptoki bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for opencryptoki is now available for Red Hat Enterprise Linux 8.

Description

The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.

Bug Fix(es) and Enhancement(s):

  • RHEL8.10.z - openCryptoki: Fix for supporting CCA 8.4 (JIRA:RHEL-105918)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 8

SRPM
opencryptoki-3.22.0-3.el8_10.1.src.rpm SHA-256: 8d1bf57b6c4bc6b30de4ed14a3454f80c1de0de2b3b02506a5c0745d0be1b6bb
x86_64
opencryptoki-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: efbcf1493c81e48277fa002447bfe05e84d851ae76daeb81383c1d4d99005340
opencryptoki-debuginfo-3.22.0-3.el8_10.1.i686.rpm SHA-256: 3054911f1f266cca3ab2f2a47711cc0f50f0d4139e8ca10be81051a486e33f4c
opencryptoki-debuginfo-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 8290649034f40f9b211eb4b58cd91d3ded4c2cf7ad89590b3be604389f383d7a
opencryptoki-debugsource-3.22.0-3.el8_10.1.i686.rpm SHA-256: 9f0ae1c3b3b07503536cbc6c0096fd1af63cbc5ed6165b2897121b95ed5bf52c
opencryptoki-debugsource-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: b9fb280f4f8e22b71b973e708b1744ed4ac51c0cd00020b67fc4f1a968054242
opencryptoki-icsftok-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: f1302d10de5cd9a9e54661fb0cc5741fb454c92c0d3b97672f9f90f9a10c2a19
opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.1.i686.rpm SHA-256: 7be57aec70ce6215c6af3e2b3b79b8e590854b7931176c32bb2bfabacafd1e25
opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 20e48b5ac93056f1aff6cdfb41e81da0c7c73ca34459839ecd2aac2f8061566c
opencryptoki-libs-3.22.0-3.el8_10.1.i686.rpm SHA-256: 3f7b37681899ba264845d6fba8b2187ce146c4796589b3e2267f6e024dd09f7e
opencryptoki-libs-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 2d541eba2a6bfbeed2f3ce73b706c48e1285508af399eca8587a0a9c26dc8bfe
opencryptoki-libs-debuginfo-3.22.0-3.el8_10.1.i686.rpm SHA-256: 392e87746241ed65087c254519fdbabf2d4fdcf3093620408370020af59d00f9
opencryptoki-libs-debuginfo-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 6fbc27f3ad9692b5fa9e572b85f9651fd3f0c24921c39a11f6e8a959a57c90c9
opencryptoki-swtok-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 96eac0df80a5f7f1e4909c3b77ad18478bec4d61fe5e0064ba8df5db01018308
opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.1.i686.rpm SHA-256: fc37d71bc426e977810546128b4bc021342491e68d27f4f863b6b3b350732d6a
opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 0923148227658bb895363dc8045ff46a7b5768057d4aacb1c882920ef7cc8a64
opencryptoki-tpmtok-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 6ea7acc2f54a52808ee59d7f8fd45b344cc6eff323f34ca4737bce99a391ec46
opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.1.i686.rpm SHA-256: 07c277c91db89a42741945fe80635a3ad865f0eab3a33a4dbdbab62a2d21f14c
opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 7c9ddbb50e1b3f4411117d36a631ac1341f1bde99c8e52097e9c0781f7615ebd

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
opencryptoki-3.22.0-3.el8_10.1.src.rpm SHA-256: 8d1bf57b6c4bc6b30de4ed14a3454f80c1de0de2b3b02506a5c0745d0be1b6bb
s390x
opencryptoki-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 5e40b922fe8a794c470167c1b41a5c49f40ee7df03134c6353070249cbdc19a9
opencryptoki-ccatok-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 7da3dfa1fe95a3eb49bf1dcc9f41a572ccb9acf23ee41de8029da5db8cc3562d
opencryptoki-ccatok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 173f06b95bb6bdfda50452a63402d078ecb2f0ad042b7d8a344703c617faa972
opencryptoki-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 92d9a603f200717d73951c8bb5ebf70a8c50181935b203bacdc9e5c0d251251a
opencryptoki-debugsource-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 904dbe6d4ff38f76959e585a6d84ce77c1478dc2fb5c832fb445d869371f9b52
opencryptoki-ep11tok-3.22.0-3.el8_10.1.s390x.rpm SHA-256: b81e9a2f4abce3f230f7f0abc42a05f8bc89446da892784eec843833af3d2309
opencryptoki-ep11tok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: bdf67cf29643de320f78480726043a1f83e17363fbad7786d07996137b1f15cd
opencryptoki-icatok-3.22.0-3.el8_10.1.s390x.rpm SHA-256: db6ead021017de93d94b17d8be03d4d1f8c08f0687a0dc3db0353949ae05511b
opencryptoki-icatok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 89875ee846a3ee9cb08394508c26d81fbbf8c3b9277fcba8611513506afb904f
opencryptoki-icsftok-3.22.0-3.el8_10.1.s390x.rpm SHA-256: df9ae9ce9a65f6d716cf4d943703c1d7f298cbf344f027b3fc7e210493de6028
opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: d1199ac4b0b39f13c19753cbe47b193241dc3bb55d013dbe6e6766b1f066ee1e
opencryptoki-libs-3.22.0-3.el8_10.1.s390x.rpm SHA-256: b50df73f69397ed3855a2b28db0cd0e7406c61275c474dd6514a294dd03d3c46
opencryptoki-libs-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: af89ab734e94feb6f5cb7c8b5d332c490d0d3fa98a3772d4d79aed5bb5667cc8
opencryptoki-swtok-3.22.0-3.el8_10.1.s390x.rpm SHA-256: d3109f5a81e1d2847c1865c0392500350120fda099629f840f0f702461988ad0
opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: b75b14ff97f87947d588c174ae992b96522521e31095b76f970efa540aad582b
opencryptoki-tpmtok-3.22.0-3.el8_10.1.s390x.rpm SHA-256: d60e29fb4e15726947e1c85d073d78585a0ceaf7f7b24c1153db6c9a05238f94
opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: f088fd7dd019c5661656472a54863528c608da485ea6436f3f417f737e7a4c4b

Red Hat Enterprise Linux for Power, little endian 8

SRPM
opencryptoki-3.22.0-3.el8_10.1.src.rpm SHA-256: 8d1bf57b6c4bc6b30de4ed14a3454f80c1de0de2b3b02506a5c0745d0be1b6bb
ppc64le
opencryptoki-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 394ee44d94d8a7f5585a65770499922a39abd25d0129c97e99d62d4c54feac9c
opencryptoki-debuginfo-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 59addd54ab84450c3a719a35874fecb55a2e7f54d3b39c13e6bc64c68405419a
opencryptoki-debugsource-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 5bcb7a357732bff3b2f8ebf16da7882a34f263155088ea075eb317804e49f362
opencryptoki-icsftok-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 32174896a138ba99f12fea30749edd15ac21cdb58bc1dc48054af0cd98362c65
opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 24b24c80ad54812906c056033b07197131b28d6ad29f602b08eabf8197df57af
opencryptoki-libs-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 5e7fa8221651d79db6e63554d1205acb90208addc902b24ef3b37e24b8e2dd7f
opencryptoki-libs-debuginfo-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 747e7c037ebd7609f22a4b011f1aac868ac332104e39eeacf64a96e2a64f4d60
opencryptoki-swtok-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 2a76554410c7f8b5b01ed44f0ea3cb688af7ba162d4673f8a1d4779167c80c54
opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 6e006b04751cad4b0204417483c969964090b2da8ae3d7576a8eddd612c994b1
opencryptoki-tpmtok-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 9ac79ee9387fe8b531589d597ae3decf0aadf879cceff8aca9bab7e776b7e795
opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: b3dc23ed69613866e1cfe084560836dd601015de87edf6597980b72abff444b2

Red Hat Enterprise Linux for ARM 64 8

SRPM
opencryptoki-3.22.0-3.el8_10.1.src.rpm SHA-256: 8d1bf57b6c4bc6b30de4ed14a3454f80c1de0de2b3b02506a5c0745d0be1b6bb
aarch64
opencryptoki-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: 786fefa2b1de9c1235e700bf0d6a36c84547b3afddfed0da86690ddcb5e2d832
opencryptoki-debuginfo-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: a6c853b0064dcf63262495c94af66e89e73e25dd233809ffdf6d2befa88d379e
opencryptoki-debugsource-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: 746f1f101597670ff0f7250d4e0dd2dd170344807c5346a0c3dc25bcbc4203a9
opencryptoki-icsftok-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: 98eaf92be02df5260bc23fdc793fd1c9c5e66cdad5341670efda7714d4924e19
opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: e95e3df9d7caa78e224fb41ec1d1057d207611919cf096b73994951a5f1196c8
opencryptoki-libs-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: 180755e96aa0e887c56add97cc66aec164deda0b5ab51af3dbe9fc2b50485312
opencryptoki-libs-debuginfo-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: 01a05cb80cc87d27bd98c4b4666dff514a3fe640642f490b051034eb6d5bedca
opencryptoki-swtok-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: 87e456e3e2cbdc43c440707e56f68798372a6e5ab377fded5d1c3591cbe6afdb
opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: d9d667d6dd83bebca80f1fd0e50cf65269235fbcc5ef2453f5dfd953cd27667d
opencryptoki-tpmtok-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: 37fb564ae637992705e805f0bf3e253d8601be059ca28fafb7de393e85e6490b
opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: b917f76ecfcef03fd958aabf6d9be2533469dfc2de1d6a7f77fc678d589d0ecc

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
opencryptoki-debuginfo-3.22.0-3.el8_10.1.i686.rpm SHA-256: 3054911f1f266cca3ab2f2a47711cc0f50f0d4139e8ca10be81051a486e33f4c
opencryptoki-debuginfo-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 8290649034f40f9b211eb4b58cd91d3ded4c2cf7ad89590b3be604389f383d7a
opencryptoki-debugsource-3.22.0-3.el8_10.1.i686.rpm SHA-256: 9f0ae1c3b3b07503536cbc6c0096fd1af63cbc5ed6165b2897121b95ed5bf52c
opencryptoki-debugsource-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: b9fb280f4f8e22b71b973e708b1744ed4ac51c0cd00020b67fc4f1a968054242
opencryptoki-devel-3.22.0-3.el8_10.1.i686.rpm SHA-256: 325843191e8f7a43acff0f4f76b2bb8338905b8248ba27aadd2dd331f5f574b2
opencryptoki-devel-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: a91ccd166a56162d440e2eb51e0fff9f4c3817b48df5bdcd7aaf1ddf7412f47d
opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.1.i686.rpm SHA-256: 7be57aec70ce6215c6af3e2b3b79b8e590854b7931176c32bb2bfabacafd1e25
opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 20e48b5ac93056f1aff6cdfb41e81da0c7c73ca34459839ecd2aac2f8061566c
opencryptoki-libs-debuginfo-3.22.0-3.el8_10.1.i686.rpm SHA-256: 392e87746241ed65087c254519fdbabf2d4fdcf3093620408370020af59d00f9
opencryptoki-libs-debuginfo-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 6fbc27f3ad9692b5fa9e572b85f9651fd3f0c24921c39a11f6e8a959a57c90c9
opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.1.i686.rpm SHA-256: fc37d71bc426e977810546128b4bc021342491e68d27f4f863b6b3b350732d6a
opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 0923148227658bb895363dc8045ff46a7b5768057d4aacb1c882920ef7cc8a64
opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.1.i686.rpm SHA-256: 07c277c91db89a42741945fe80635a3ad865f0eab3a33a4dbdbab62a2d21f14c
opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.1.x86_64.rpm SHA-256: 7c9ddbb50e1b3f4411117d36a631ac1341f1bde99c8e52097e9c0781f7615ebd

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
opencryptoki-debuginfo-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 59addd54ab84450c3a719a35874fecb55a2e7f54d3b39c13e6bc64c68405419a
opencryptoki-debugsource-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 5bcb7a357732bff3b2f8ebf16da7882a34f263155088ea075eb317804e49f362
opencryptoki-devel-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 34c97685e30654ce76c7026b1f9abc82278de3717adda8dcee517558d4ad2547
opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 24b24c80ad54812906c056033b07197131b28d6ad29f602b08eabf8197df57af
opencryptoki-libs-debuginfo-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 747e7c037ebd7609f22a4b011f1aac868ac332104e39eeacf64a96e2a64f4d60
opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: 6e006b04751cad4b0204417483c969964090b2da8ae3d7576a8eddd612c994b1
opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.1.ppc64le.rpm SHA-256: b3dc23ed69613866e1cfe084560836dd601015de87edf6597980b72abff444b2

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
opencryptoki-debuginfo-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: a6c853b0064dcf63262495c94af66e89e73e25dd233809ffdf6d2befa88d379e
opencryptoki-debugsource-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: 746f1f101597670ff0f7250d4e0dd2dd170344807c5346a0c3dc25bcbc4203a9
opencryptoki-devel-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: 9f7a5a663fb22295670ba4c9d2f2169eddd4cb1ff2bbf7dfe033bd2c17d9629b
opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: e95e3df9d7caa78e224fb41ec1d1057d207611919cf096b73994951a5f1196c8
opencryptoki-libs-debuginfo-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: 01a05cb80cc87d27bd98c4b4666dff514a3fe640642f490b051034eb6d5bedca
opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: d9d667d6dd83bebca80f1fd0e50cf65269235fbcc5ef2453f5dfd953cd27667d
opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.1.aarch64.rpm SHA-256: b917f76ecfcef03fd958aabf6d9be2533469dfc2de1d6a7f77fc678d589d0ecc

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
opencryptoki-ccatok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 173f06b95bb6bdfda50452a63402d078ecb2f0ad042b7d8a344703c617faa972
opencryptoki-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 92d9a603f200717d73951c8bb5ebf70a8c50181935b203bacdc9e5c0d251251a
opencryptoki-debugsource-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 904dbe6d4ff38f76959e585a6d84ce77c1478dc2fb5c832fb445d869371f9b52
opencryptoki-devel-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 1be0229130389fd527f3abc1ea6c11c7f9d004bd393b723f0bfaa6c40b033315
opencryptoki-ep11tok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: bdf67cf29643de320f78480726043a1f83e17363fbad7786d07996137b1f15cd
opencryptoki-icatok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: 89875ee846a3ee9cb08394508c26d81fbbf8c3b9277fcba8611513506afb904f
opencryptoki-icsftok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: d1199ac4b0b39f13c19753cbe47b193241dc3bb55d013dbe6e6766b1f066ee1e
opencryptoki-libs-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: af89ab734e94feb6f5cb7c8b5d332c490d0d3fa98a3772d4d79aed5bb5667cc8
opencryptoki-swtok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: b75b14ff97f87947d588c174ae992b96522521e31095b76f970efa540aad582b
opencryptoki-tpmtok-debuginfo-3.22.0-3.el8_10.1.s390x.rpm SHA-256: f088fd7dd019c5661656472a54863528c608da485ea6436f3f417f737e7a4c4b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.