RHSA-2026:49668: Moderate: p11-kit security update
Moderate: p11-kit security update
Other sources
The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.Security Fix(es): p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/p11-kitto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2 - Upgrade
Upgrade
redhat/p11-kit-clientto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2 - Upgrade
Upgrade
redhat/p11-kit-client-debuginfoto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2 - Upgrade
Upgrade
redhat/p11-kit-debuginfoto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2 - Upgrade
Upgrade
redhat/p11-kit-debugsourceto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2 - Upgrade
Upgrade
redhat/p11-kit-develto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2 - Upgrade
Upgrade
redhat/p11-kit-serverto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2 - Upgrade
Upgrade
redhat/p11-kit-server-debuginfoto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2 - Upgrade
Upgrade
redhat/p11-kit-trustto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2 - Upgrade
Upgrade
redhat/p11-kit-trust-debuginfoto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2 - Upgrade
Upgrade
redhat/p11-kitto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2.aa - Upgrade
Upgrade
redhat/p11-kit-clientto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2.aa - Upgrade
Upgrade
redhat/p11-kit-client-debuginfoto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2.aa - Upgrade
Upgrade
redhat/p11-kit-debuginfoto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2.aa - Upgrade
Upgrade
redhat/p11-kit-debugsourceto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2.aa - Upgrade
Upgrade
redhat/p11-kit-develto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2.aa - Upgrade
Upgrade
redhat/p11-kit-serverto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2.aa - Upgrade
Upgrade
redhat/p11-kit-server-debuginfoto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2.aa - Upgrade
Upgrade
redhat/p11-kit-trustto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2.aa - Upgrade
Upgrade
redhat/p11-kit-trust-debuginfoto a version that resolves this vulnerability.Fixed in 0.26.4-1.el10_2.aa - Upgrade
Upgrade
p11-kitto a version that resolves this vulnerability.Patch CVE-2026-13757
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:49668?
The severity of RHSA-2026:49668 is classified as medium.
How do I fix RHSA-2026:49668?
To fix RHSA-2026:49668, you should update the p11-kit packages to the latest version provided by your distribution.
What products are affected by RHSA-2026:49668?
The affected products include redhat/p11-kit, redhat/p11-kit-client, and related packages.
What security issues does RHSA-2026:49668 address?
RHSA-2026:49668 addresses a stack exhaustion vulnerability via unbounded processing in p11-kit.
Is there any risk associated with not addressing RHSA-2026:49668?
Failing to address RHSA-2026:49668 may leave your system vulnerable to exploitation of the stack exhaustion issue.