ELSA-2026-67265-0

ELSA-2026-67265-0 - libkcapi security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-09-14

Description

[1.4.0-3.0.1]
- Change distroname_ext in spec file to oracle

[1.4.0-3]
- Remove ansi_cprng test as new kernels don't support it
Resolves: RHEL-242707
- Add tag processing in AEAD decryption without ciphertext
Resolves: RHEL-242667
- CVE-2026-71226: Fix memory corruption via uncanceled AIO requests
on error in libkcapi's one-shot AIO path
Resolves: RHEL-224815
- CVE-2026-71227: Fix infinite loop denial of service in libkcapi
_kcapi_aio_read_all() due to unhandled io_getevents() timeout return
Resolves: RHEL-224976
- CVE-2026-71225: Fix IV reuse in libkcapi one-shot symmetric cipher chunking
Resolves: RHEL-224704

Related CVEs

CVE-2026-71225

CVE-2026-71226

CVE-2026-71227

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	libkcapi-1.4.0-3.0.1.el9_8.src.rpm	4d450f8a2f2a1992706778b3aa4e2d93c64d7dc6bef4bb099457bbc5473d09e6	-	ol9_aarch64_baseos_latest
	libkcapi-1.4.0-3.0.1.el9_8.src.rpm	4d450f8a2f2a1992706778b3aa4e2d93c64d7dc6bef4bb099457bbc5473d09e6	-	ol9_aarch64_u8_baseos_patch
	libkcapi-1.4.0-3.0.1.el9_8.aarch64.rpm	956faeb0b184e98d3103fb8961af0530bcec819388c6b2a93717d1bd060d08b1	-	ol9_aarch64_baseos_latest
	libkcapi-1.4.0-3.0.1.el9_8.aarch64.rpm	956faeb0b184e98d3103fb8961af0530bcec819388c6b2a93717d1bd060d08b1	-	ol9_aarch64_u8_baseos_patch
	libkcapi-hmaccalc-1.4.0-3.0.1.el9_8.aarch64.rpm	790ceb6d03e1e79496be8e2c4245a38502f588b559095a43ce3e582e783eb0e4	-	ol9_aarch64_baseos_latest
	libkcapi-hmaccalc-1.4.0-3.0.1.el9_8.aarch64.rpm	790ceb6d03e1e79496be8e2c4245a38502f588b559095a43ce3e582e783eb0e4	-	ol9_aarch64_u8_baseos_patch
Oracle Linux 9 (x86_64)	libkcapi-1.4.0-3.0.1.el9_8.src.rpm	4d450f8a2f2a1992706778b3aa4e2d93c64d7dc6bef4bb099457bbc5473d09e6	-	ol9_x86_64_baseos_latest
	libkcapi-1.4.0-3.0.1.el9_8.src.rpm	4d450f8a2f2a1992706778b3aa4e2d93c64d7dc6bef4bb099457bbc5473d09e6	-	ol9_x86_64_u8_baseos_patch
	libkcapi-1.4.0-3.0.1.el9_8.i686.rpm	3603a8ebe2de0980ba9d5f676d22836312cb09ae17ec352622b823a17bdeb2fd	-	ol9_x86_64_baseos_latest
	libkcapi-1.4.0-3.0.1.el9_8.i686.rpm	3603a8ebe2de0980ba9d5f676d22836312cb09ae17ec352622b823a17bdeb2fd	-	ol9_x86_64_u8_baseos_patch
	libkcapi-1.4.0-3.0.1.el9_8.x86_64.rpm	771882abd445dce2a6b3b15b91f9a403f656c3dd3a117f0277ba911546d34f78	-	ol9_x86_64_baseos_latest
	libkcapi-1.4.0-3.0.1.el9_8.x86_64.rpm	771882abd445dce2a6b3b15b91f9a403f656c3dd3a117f0277ba911546d34f78	-	ol9_x86_64_u8_baseos_patch
	libkcapi-hmaccalc-1.4.0-3.0.1.el9_8.x86_64.rpm	c0ede33dde483ea69229ae77b45f914d32483d39038cd5624ed5843ed908e459	-	ol9_x86_64_baseos_latest
	libkcapi-hmaccalc-1.4.0-3.0.1.el9_8.x86_64.rpm	c0ede33dde483ea69229ae77b45f914d32483d39038cd5624ed5843ed908e459	-	ol9_x86_64_u8_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team