ALSA-2026:49668

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49668.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:49668
Related
  • CVE-2026-13757
Published
2026-08-03T00:00:00Z
Modified
2026-08-04T20:00:04.678014701Z
Summary
Moderate: p11-kit security update
Details

The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.

Security Fix(es):

  • p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:10 / p11-kit

Package

Name
p11-kit
Purl
pkg:rpm/almalinux/p11-kit

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.26.4-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49668.json"

AlmaLinux:10 / p11-kit-client

Package

Name
p11-kit-client
Purl
pkg:rpm/almalinux/p11-kit-client

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.26.4-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49668.json"

AlmaLinux:10 / p11-kit-devel

Package

Name
p11-kit-devel
Purl
pkg:rpm/almalinux/p11-kit-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.26.4-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49668.json"

AlmaLinux:10 / p11-kit-server

Package

Name
p11-kit-server
Purl
pkg:rpm/almalinux/p11-kit-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.26.4-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49668.json"

AlmaLinux:10 / p11-kit-trust

Package

Name
p11-kit-trust
Purl
pkg:rpm/almalinux/p11-kit-trust

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.26.4-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49668.json"