From f432a9e625cd1dabc7722e894909d7ae23e5e488 Mon Sep 17 00:00:00 2001 From: Fiona Klute Date: Sat, 17 Oct 2026 16:00:26 +0200 Subject: [PATCH] package/p11-kit: security bump to version 0.26.5 Security fixes by versions: 0.26.5 * CVE-2026-18938: rpc: guard against overflow when decoding nested attributes https://github.com/advisories/GHSA-6x8p-h5fj-5ppr 0.26.3 * CVE-2026-13757: server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit https://github.com/advisories/GHSA-p2wm-69qx-x25w * various memory management fixes (including memory leaks) without CVE or details on possible security impact Full upstream changelog: https://github.com/p11-glue/p11-kit/blob/0.26.5/NEWS Signed-off-by: Fiona Klute Signed-off-by: Julien Olivain --- package/p11-kit/p11-kit.hash | 2 +- package/p11-kit/p11-kit.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/p11-kit/p11-kit.hash b/package/p11-kit/p11-kit.hash index 943ad9c22f..ca76eddae6 100644 --- a/package/p11-kit/p11-kit.hash +++ b/package/p11-kit/p11-kit.hash @@ -1,4 +1,4 @@ # From https://github.com/p11-glue/p11-kit/releases/tag/0.26.2 -sha256 09fd9f44da4813a3141e73d5e7cf7008e5660d0405f13d56c15e1da9dcecf828 p11-kit-0.26.2.tar.xz +sha256 f2cc09111e44bf3fea58f023180b33acea90aa82d042d6fbb623fbc5ba033bb7 p11-kit-0.26.5.tar.xz # Locally computed sha256 2e1ba993904df807a10c3eda1e5c272338edc35674b679773a8b3ad460731054 COPYING diff --git a/package/p11-kit/p11-kit.mk b/package/p11-kit/p11-kit.mk index 60133223ce..b3bb3e1263 100644 --- a/package/p11-kit/p11-kit.mk +++ b/package/p11-kit/p11-kit.mk @@ -4,7 +4,7 @@ # ################################################################################ -P11_KIT_VERSION = 0.26.2 +P11_KIT_VERSION = 0.26.5 P11_KIT_SOURCE = p11-kit-$(P11_KIT_VERSION).tar.xz P11_KIT_SITE = https://github.com/p11-glue/p11-kit/releases/download/$(P11_KIT_VERSION) P11_KIT_INSTALL_STAGING = YES