UbuntuUpdates.org

Package "p11-kit"

Name: p11-kit

Description:

p11-glue utilities
Latest version: 0.23.2-5~ubuntu16.04.2
Release: xenial (16.04)
Level: updates
Repository: main
Homepage: http://p11-glue.freedesktop.org/p11-kit.html

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "p11-kit"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "p11-kit" in Xenial

Repository Area Version
base main 0.23.2-3
security main 0.23.2-5~ubuntu16.04.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.23.2-5~ubuntu16.04.2 2021-01-05 19:07:12 UTC

  p11-kit (0.23.2-5~ubuntu16.04.2) xenial-security; urgency=medium

  * SECURITY UPDATE: multiple integer overflows
    - debian/patches/CVE-2020-29361-1.patch: check for arithmetic overflows
      before allocating in p11-kit/iter.c, p11-kit/lists.c,
      p11-kit/proxy.c, p11-kit/rpc-message.c, p11-kit/rpc-message.h,
      p11-kit/rpc-server.c, trust/index.c.
    - debian/patches/CVE-2020-29361-2.patch: add reallocarray and follow-up
      to arithmetic overflow fix in common/compat.c, common/compat.h,
      p11-kit/rpc-message.c.
    - CVE-2020-29361
  * SECURITY UPDATE: heap over-read in the RPC protocol
    - debian/patches/CVE-2020-29362.patch: fix bounds check in
      p11-kit/rpc-message.c.
    - CVE-2020-29362

 -- Marc Deslauriers <email address hidden> Mon, 04 Jan 2021 14:18:11 -0500
Source diff to previous version
CVE-2020-29361 An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit li
CVE-2020-29362 An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit s

Version: 0.23.2-5~ubuntu16.04.1 2016-09-06 15:06:39 UTC

  p11-kit (0.23.2-5~ubuntu16.04.1) xenial-proposed; urgency=medium

  * Backport to Ubuntu 16.04 LTS for improved manpages (LP: #1615449)
  * Don't enable hardening flags to keep this change minimal.
1615449 Use upstream manpages instead of stub Debian-provided man page


About   -   Send Feedback to @ubuntu_updates