package/p11-kit: security bump to version 0.26.5

Security fixes by versions:

0.26.5
* CVE-2026-18938: rpc: guard against overflow when decoding nested
  attributes
  https://github.com/advisories/GHSA-6x8p-h5fj-5ppr

0.26.3
* CVE-2026-13757: server: fixed stack exhaustion via unbounded
  recursion in RPC attribute parsing by enforcing a recursion depth
  limit
  https://github.com/advisories/GHSA-p2wm-69qx-x25w
* various memory management fixes (including memory leaks) without
  CVE or details on possible security impact

Full upstream changelog:
https://github.com/p11-glue/p11-kit/blob/0.26.5/NEWS

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Fiona Klute
2026-10-17 16:00:26 +02:00
committed by Julien Olivain
parent 45fb109414
commit f432a9e625
2 changed files with 2 additions and 2 deletions

View File

@@ -1,4 +1,4 @@
# From https://github.com/p11-glue/p11-kit/releases/tag/0.26.2
sha256 09fd9f44da4813a3141e73d5e7cf7008e5660d0405f13d56c15e1da9dcecf828 p11-kit-0.26.2.tar.xz
sha256 f2cc09111e44bf3fea58f023180b33acea90aa82d042d6fbb623fbc5ba033bb7 p11-kit-0.26.5.tar.xz
# Locally computed
sha256 2e1ba993904df807a10c3eda1e5c272338edc35674b679773a8b3ad460731054 COPYING

View File

@@ -4,7 +4,7 @@
#
################################################################################
P11_KIT_VERSION = 0.26.2
P11_KIT_VERSION = 0.26.5
P11_KIT_SOURCE = p11-kit-$(P11_KIT_VERSION).tar.xz
P11_KIT_SITE = https://github.com/p11-glue/p11-kit/releases/download/$(P11_KIT_VERSION)
P11_KIT_INSTALL_STAGING = YES