[ubuntu/jammy-security] p11-kit 0.24.0-6ubuntu0.1 (Accepted)

Thu Aug 27 15:23:16 UTC 2026

p11-kit (0.24.0-6ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: integer overflow in nested attribute decoding
    - debian/patches/CVE-2026-18938.patch: guard against overflow when
      decoding nested attributes (32-bit only, heap OOB write, DoS).
    - CVE-2026-18938
  * SECURITY UPDATE: unbounded recursion in RPC attribute parsing
    - debian/patches/CVE-2026-13757.patch: add recursion depth limit into
      RPC attribute parsing (stack exhaustion, DoS).
    - CVE-2026-13757

Date: 2026-08-25 15:29:12.328963+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/p11-kit/0.24.0-6ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.