Stay Secure with the Latest Linux Advisories

security advisoryfedoraprivilege escalation

Fedora 43 opencryptoki Privilege Escalation Risk CVE-2026-23893

Fix CVE-2026-23893, Privilege Escalation or Data Exposure via Symlink Following. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-6c3b6ec624 2026-05-21 01:26:51.960371+00:00 -------------------------------------------------------------------------------- Name : opencryptoki Product : Fedora 43 Version : 3.26.0 Release : 3.fc43 URL : https://github.com/opencryptoki/opencryptoki Summary : Implementation of the PKCS#11 (Cryptoki) specification v3.0 and partially v3.1 Description : Opencryptoki implements the PKCS#11 specification v3.0 and partially v3.1 for a set of cryptographic hardware, such as IBM 4767, 4768, 4769 and 4770 crypto cards, and the Trusted Platform Module (TPM) chip. Opencryptoki also brings a software token implementation that can be used without any cryptographic hardware. This package contains the Slot Daemon (pkcsslotd) and general utilities. -------------------------------------------------------------------------------- Update Information: Fix CVE-2026-23893, Privilege Escalation or Data Exposure via Symlink Following -------------------------------------------------------------------------------- ChangeLog: * Tue May 5 2026 Than Ngo - 3.26.0-3 - Fix rhbz#2432016: CVE-2026-23893, Privilege Escalation or Data Exposure via Symlink Following * Fri Jan 16 2026 Fedora Release Engineering - 3.26.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Nov 28 2025 Than Ngo - 3.26.0-1 - Update to 3.26.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2432016 - CVE-2026-23893 opencryptoki: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2432016 [ 2 ] Bug #2432017 - CVE-2026-23893 opencryptoki: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2432017 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6c3b6ec624' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Fixes CVE-2026-23893 for Fedora 43 addressing privilege escalation or data exposure vulnerabilities.. Fedora 43, Privilege Escalation, opencryptoki, Symlink Following. . Severity: Important. LinuxSecurity.com Team

May 21, 2026 •Important Fedora