Summary
[0.23.22-1]
- Rebase to 0.23.22 to fix memory safety issues (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363)
- Preserve DT_NEEDED information from the previous version, flagged by rpmdiff
- Add xsltproc to BR
[0.23.21-4]
- Fix realloc usage on proxy cleanup (#1894979)
- Make 'trust anchor --store' preserve all attributes from .p11-kit files
[0.23.21-3]
- Restore clobbered changelog entry
[0.23.21-2]
- Update p11-kit-invalid-config.patch to be more thorough (thanks to
Alexander Sosedkin)
[0.23.21-1]
- Update to upstream 0.23.21 release
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | p11-kit | 0:0.23.22-1.el8 |
| Oracle Linux · 8 | p11-kit-devel | 0:0.23.22-1.el8 |
| Oracle Linux · 8 | p11-kit-server | 0:0.23.22-1.el8 |
| Oracle Linux · 8 | p11-kit-trust | 0:0.23.22-1.el8 |
Vulnerabilities 3
-
Unscored —
An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array…
-
Unscored —
An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC…
-
Unscored —
An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC …