[ubuntu/resolute-security] opencryptoki 3.26.0+dfsg-0ubuntu1.1 (Accepted)

[John Breton]

opencryptoki (3.26.0+dfsg-0ubuntu1.1) resolute-security; urgency=medium

  * d/p/lp-2163255-fix-ckm-ecdh-aes-key-wrap-buffer-size.patch: Fix
    CKM_ECDH_AES_KEY_WRAP buffer size calculation with compressed keys,
    which could lead to an out-of-bounds write. (LP: #2163255)
    (CVE-2026-22791)
  * d/p/lp-2163253-fix-ber-der-decoder-out-of-bounds-access.patch: Fix
    possible out-of-bounds access in BER decode functions. (LP: #2163253)
    (CVE-2026-40253)
  * d/p/lp-2163254-fix-symlink-following-vulnerabilities.patch: Fix
    symlink-following vulnerabilities (CWE-59). (LP: #2163254)
    (CVE-2026-23893)

Date: 2026-08-28 15:00:11.998930+00:00
Changed-By: Frank Heimes <frank.heimes at canonical.com>
Signed-By: John Breton <john.breton at canonical.com>
https://launchpad.net/ubuntu/+source/opencryptoki/3.26.0+dfsg-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.