UbuntuUpdates.org

Package "p11-kit-modules"

Name: p11-kit-modules

Description:

p11-glue proxy and trust modules
Latest version: 0.23.2-5~ubuntu16.04.2
Release: xenial (16.04)
Level: security
Repository: main
Head package: p11-kit
Homepage: http://p11-glue.freedesktop.org/p11-kit.html

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "p11-kit-modules"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "p11-kit-modules" in Xenial

Repository Area Version
base main 0.23.2-3
updates main 0.23.2-5~ubuntu16.04.2

Changelog

Version: 0.23.2-5~ubuntu16.04.2 2021-01-05 18:06:18 UTC

  p11-kit (0.23.2-5~ubuntu16.04.2) xenial-security; urgency=medium

  * SECURITY UPDATE: multiple integer overflows
    - debian/patches/CVE-2020-29361-1.patch: check for arithmetic overflows
      before allocating in p11-kit/iter.c, p11-kit/lists.c,
      p11-kit/proxy.c, p11-kit/rpc-message.c, p11-kit/rpc-message.h,
      p11-kit/rpc-server.c, trust/index.c.
    - debian/patches/CVE-2020-29361-2.patch: add reallocarray and follow-up
      to arithmetic overflow fix in common/compat.c, common/compat.h,
      p11-kit/rpc-message.c.
    - CVE-2020-29361
  * SECURITY UPDATE: heap over-read in the RPC protocol
    - debian/patches/CVE-2020-29362.patch: fix bounds check in
      p11-kit/rpc-message.c.
    - CVE-2020-29362

 -- Marc Deslauriers <email address hidden> Mon, 04 Jan 2021 14:18:11 -0500
CVE-2020-29361 An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit li
CVE-2020-29362 An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit s


About   -   Send Feedback to @ubuntu_updates