Summary
The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.
Security Fix(es):
* p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | p11-kit | 0.26.4-1.el9_8 |
| AlmaLinux · 9 | p11-kit-client | 0.26.4-1.el9_8 |
| AlmaLinux · 9 | p11-kit-devel | 0.26.4-1.el9_8 |
| AlmaLinux · 9 | p11-kit-server | 0.26.4-1.el9_8 |
| AlmaLinux · 9 | p11-kit-trust | 0.26.4-1.el9_8 |
Vulnerabilities 1
-
Medium 6.2
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLAT…