Red Hat Product Errata RHSA-2026:18599 - Security Advisory Issued: 2026-05-19 Updated: 2026-05-19 RHSA-2026:18599 - Security Advisory Overview Updated Packages Synopsis Moderate: p11-kit security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for p11-kit is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files. Security Fix(es): p11-kit: p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Fixes BZ - 2437308 - CVE-2026-2100 p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters RHEL-91952 - Split p11-kit-client.so into a separate sub-package CVEs CVE-2026-2100 References https://access.redhat.com/security/updates/classification/#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM p11-kit-0.26.2-1.el9.src.rpm SHA-256: b33c02489d0d7b599498f04f09da5a3f6c0b6962c462bcc0ad8accbb4d41ea6c x86_64 p11-kit-0.26.2-1.el9.i686.rpm SHA-256: c1c0b1085d7d7abfbcb393c430b7c34be5258fa27f77f5ee3d90d9659b1fb9d9 p11-kit-0.26.2-1.el9.x86_64.rpm SHA-256: 3bc31959dd99d0c3103866296664c02c219c0a7c8b906c96ecc5ec3dda57c864 p11-kit-client-0.26.2-1.el9.x86_64.rpm SHA-256: 5625069d539af1c39582d9fa938a571c992815006500fcc04af8517a88ac6f19 p11-kit-client-debuginfo-0.26.2-1.el9.i686.rpm SHA-256: 4b497b7beb1c6c179c7996a61ed62d9b7ec33afc241c232553e104849e85b01a p11-kit-client-debuginfo-0.26.2-1.el9.i686.rpm SHA-256: 4b497b7beb1c6c179c7996a61ed62d9b7ec33afc241c232553e104849e85b01a p11-kit-client-debuginfo-0.26.2-1.el9.x86_64.rpm SHA-256: 295707f814082b58ede7f6b63b0326785bac39733dfb4a5341cfbd357b48dd02 p11-kit-client-debuginfo-0.26.2-1.el9.x86_64.rpm SHA-256: 295707f814082b58ede7f6b63b0326785bac39733dfb4a5341cfbd357b48dd02 p11-kit-debuginfo-0.26.2-1.el9.i686.rpm SHA-256: b87d9da91939c59d521e973bcf4b04ae196c904046e528300c6d8a031c003d24 p11-kit-debuginfo-0.26.2-1.el9.i686.rpm SHA-256: b87d9da91939c59d521e973bcf4b04ae196c904046e528300c6d8a031c003d24 p11-kit-debuginfo-0.26.2-1.el9.x86_64.rpm SHA-256: b1df4b422cbb0df819612c52187172cb3dc252ffc7b592a14adc54d7b0a07c6e p11-kit-debuginfo-0.26.2-1.el9.x86_64.rpm SHA-256: b1df4b422cbb0df819612c52187172cb3dc252ffc7b592a14adc54d7b0a07c6e p11-kit-debugsource-0.26.2-1.el9.i686.rpm SHA-256: a07fd461952fa47bde6baf95153098b959e3284bdb8fcaa9b85c9e0215995fb6 p11-kit-debugsource-0.26.2-1.el9.i686.rpm SHA-256: a07fd461952fa47bde6baf95153098b959e3284bdb8fcaa9b85c9e0215995fb6 p11-kit-debugsource-0.26.2-1.el9.x86_64.rpm SHA-256: db8414c93ea325d7c9eddbac6a1799387b68e090662f64eed4f2a65b0ebe56a5 p11-kit-debugsource-0.26.2-1.el9.x86_64.rpm SHA-256: db8414c93ea325d7c9eddbac6a1799387b68e090662f64eed4f2a65b0ebe56a5 p11-kit-devel-0.26.2-1.el9.i686.rpm SHA-256: a49909b275e8913672eedd698689d3da9f9d006a22f780f5b7cd2a976a5e7588 p11-kit-devel-0.26.2-1.el9.x86_64.rpm SHA-256: 796ca78d3d5997abf858fc74083274d2f495be73a07c0e118fb7e6fc4f573f23 p11-kit-server-0.26.2-1.el9.x86_64.rpm SHA-256: 964e52cc6cd8f4258517c70127fd3f494fba4785227b61b5e310593ddab5d8cb p11-kit-server-debuginfo-0.26.2-1.el9.i686.rpm SHA-256: 2fae9675ae80e5f0671bdd6c1a811667ed63a973211e3c128e47fc86ef555fc0 p11-kit-server-debuginfo-0.26.2-1.el9.i686.rpm SHA-256: 2fae9675ae80e5f0671bdd6c1a811667ed63a973211e3c128e47fc86ef555fc0 p11-kit-server-debuginfo-0.26.2-1.el9.x86_64.rpm SHA-256: 1a27a4d8a9a281bf4a50ef079d496000175641cbcca6a3b1f88081e923fe38aa p11-kit-server-debuginfo-0.26.2-1.el9.x86_64.rpm SHA-256: 1a27a4d8a9a281bf4a50ef079d496000175641cbcca6a3b1f88081e923fe38aa p11-kit-trust-0.26.2-1.el9.i686.rpm SHA-256: 5e31eddc1d1f2106b288532a324d5ee4b731d178d72d9073ad7027cb3099b499 p11-kit-trust-0.26.2-1.el9.x86_64.rpm SHA-256: 715fd8181525f3d6869d5086f36a15ea47a0e96297ccf5920c37d3a0cb36c409 p11-kit-trust-debuginfo-0.26.2-1.el9.i686.rpm SHA-256: 918ee45a23b5f584217a44a043a481dd791ca141becbd71931d76390c1e244ae p11-kit-trust-debuginfo-0.26.2-1.el9.i686.rpm SHA-256: 918ee45a23b5f584217a44a043a481dd791ca141becbd71931d76390c1e244ae p11-kit-trust-debuginfo-0.26.2-1.el9.x86_64.rpm SHA-256: 694c1201191b49a1f531df363da6d6c299f4eba5a63d4363f14d7da087c20770 p11-kit-trust-debuginfo-0.26.2-1.el9.x86_64.rpm SHA-256: 694c1201191b49a1f531df363da6d6c299f4eba5a63d4363f14d7da087c20770 Red Hat Enterprise Linux for IBM z Systems 9 SRPM p11-kit-0.26.2-1.el9.src.rpm SHA-256: b33c02489d0d7b599498f04f09da5a3f6c0b6962c462bcc0ad8accbb4d41ea6c s390x p11-kit-0.26.2-1.el9.s390x.rpm SHA-256: a1834007eda45150d6d3e49efdd5ace430a148005365ae00affe4e6a09b8bef4 p11-kit-client-0.26.2-1.el9.s390x.rpm SHA-256: 4059a3def0c3f83bea25d3e658821efb62f1862df62dbe2fe42b8862ee10a0fe p11-kit-client-debuginfo-0.26.2-1.el9.s390x.rpm SHA-256: b40bc85e24bb3cbc95c0dff2e966460ff4406e1c3ff0d56acfdf2e136a5a31c7 p11-kit-client-debuginfo-0.26.2-1.el9.s390x.rpm SHA-256: b40bc85e24bb3cbc95c0dff2e966460ff4406e1c3ff0d56acfdf2e136a5a31c7 p11-kit-debuginfo-0.26.2-1.el9.s390x.rpm SHA-256: c7f1d8a016234b5a31c24a68bb69997574fe1d4504249d23ff212835447bb4b6 p11-kit-debuginfo-0.26.2-1.el9.s390x.rpm SHA-256: c7f1d8a016234b5a31c24a68bb69997574fe1d4504249d23ff212835447bb4b6 p11-kit-debugsource-0.26.2-1.el9.s390x.rpm SHA-256: eddc7e475cdabe6f4110a1cbfba2373ee9822b210c381209fe0db60920a153ad p11-kit-debugsource-0.26.2-1.el9.s390x.rpm SHA-256: eddc7e475cdabe6f4110a1cbfba2373ee9822b210c381209fe0db60920a153ad p11-kit-devel-0.26.2-1.el9.s390x.rpm SHA-256: 0db49ce2166a2529e7a090a9019c09fa5001c767f35ac846718f15a0f1920a08 p11-kit-server-0.26.2-1.el9.s390x.rpm SHA-256: af45a8f797448bfdd6a1cf1559c767708384daee8a4eb8051de48ab86b7d413f p11-kit-server-debuginfo-0.26.2-1.el9.s390x.rpm SHA-256: 808787ea0d2ba2872ded581b800b04720c2901ea9ddedabe7e19046798df7583 p11-kit-server-debuginfo-0.26.2-1.el9.s390x.rpm SHA-256: 808787ea0d2ba2872ded581b800b04720c2901ea9ddedabe7e19046798df7583 p11-kit-trust-0.26.2-1.el9.s390x.rpm SHA-256: de6e5b8084f32d5ee4256cc510e64306e1c8a55dd8d245625723740c61f66149 p11-kit-trust-debuginfo-0.26.2-1.el9.s390x.rpm SHA-256: a02ade4952f96b6e5b5eb8327a283937f856e0bb126a7425b691ace104fb6e71 p11-kit-trust-debuginfo-0.26.2-1.el9.s390x.rpm SHA-256: a02ade4952f96b6e5b5eb8327a283937f856e0bb126a7425b691ace104fb6e71 Red Hat Enterprise Linux for Power, little endian 9 SRPM p11-kit-0.26.2-1.el9.src.rpm SHA-256: b33c02489d0d7b599498f04f09da5a3f6c0b6962c462bcc0ad8accbb4d41ea6c ppc64le p11-kit-0.26.2-1.el9.ppc64le.rpm SHA-256: b78c695d8d1e6ff929e298d5b03d55910999c15a2537ac4b03ae5e003a8922f8 p11-kit-client-0.26.2-1.el9.ppc64le.rpm SHA-256: 6506eb0cc6ba4bb25bd1d46d608a57f59d55fc1d052de108137796ec040701f4 p11-kit-client-debuginfo-0.26.2-1.el9.ppc64le.rpm SHA-256: 23f597733ea5c98c0748b7b24d12114f79b3324e0760ca68dbb4b69a1686c294 p11-kit-client-debuginfo-0.26.2-1.el9.ppc64le.rpm SHA-256: 23f597733ea5c98c0748b7b24d12114f79b3324e0760ca68dbb4b69a1686c294 p11-kit-debuginfo-0.26.2-1.el9.ppc64le.rpm SHA-256: f0764db1c4e8fc20c5dbb03a1969f0b59ba8e63ad86ea7ad68d6a8021fd6f4ad p11-kit-debuginfo-0.26.2-1.el9.ppc64le.rpm SHA-256: f0764db1c4e8fc20c5dbb03a1969f0b59ba8e63ad86ea7ad68d6a8021fd6f4ad p11-kit-debugsource-0.26.2-1.el9.ppc64le.rpm SHA-256: 20ed62cfbfba4e38ce886d831b3f1d2504df9928d9dcd94110131b67c832c2af p11-kit-debugsource-0.26.2-1.el9.ppc64le.rpm SHA-256: 20ed62cfbfba4e38ce886d831b3f1d2504df9928d9dcd94110131b67c832c2af p11-kit-devel-0.26.2-1.el9.ppc64le.rpm SHA-256: 1131cc598cf32e5f6ef666131bc770a6e9fb0bf8f7f0734e929df51fb5c6fde8 p11-kit-server-0.26.2-1.el9.ppc64le.rpm SHA-256: e0e7b90b01bb588caa4645b75df0c61a32405a05a1d5cc4d70ea0987eafe1248 p11-kit-server-debuginfo-0.26.2-1.el9.ppc64le.rpm SHA-256: b8ed826d4ec0e33c1e03d2beba7c0c1d88028d0bd5975314a9bdcccf25f1adb0 p11-kit-server-debuginfo-0.26.2-1.el9.ppc64le.rpm SHA-256: b8ed826d4ec0e33c1e03d2beba7c0c1d88028d0bd5975314a9bdcccf25f1adb0 p11-kit-trust-0.26.2-1.el9.ppc64le.rpm SHA-256: a44c731c9028bcaff8674aaff78d5f499c7aa5b3e6e8319cb784e5e98dfcd476 p11-kit-trust-debuginfo-0.26.2-1.el9.ppc64le.rpm SHA-256: 07725a11546ac234070bcca9ff3e6ba3d4065dc5168d1dcae5360d5936470714 p11-kit-trust-debuginfo-0.26.2-1.el9.ppc64le.rpm SHA-256: 07725a11546ac234070bcca9ff3e6ba3d4065dc5168d1dcae5360d5936470714 Red Hat Enterprise Linux for ARM 64 9 SRPM p11-kit-0.26.2-1.el9.src.rpm SHA-256: b33c02489d0d7b599498f04f09da5a3f6c0b6962c462bcc0ad8accbb4d41ea6c aarch64 p11-kit-0.26.2-1.el9.aarch64.rpm SHA-256: 5c8fe4b19ea7a76bc2213087ee91679143217fbc33162103e60dd60735504f36 p11-kit-client-0.26.2-1.el9.aarch64.rpm SHA-256: 3c67fbb03889ad569babf33fb8068e7b7ccc65364efd2615a97c925ef603c49d p11-kit-client-debuginfo-0.26.2-1.el9.aarch64.rpm SHA-256: e025fe303287707c2784789a231230f82b1a12d688c54de119e4300d2b04a904