Ubuntu alert USN-8687-1 (p11-kit)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8687-1] p11-kit vulnerabilities
Date:
             
 
Mon, 31 Aug 2026 15:41:58 +0000
Message-ID:
             
 
<E1x1490-0006cr-7A@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8687-1
August 27, 2026

p11-kit vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS

Summary:

p11-kit could be made to crash if it received specially crafted input.

Software Description:
- p11-kit: p11-glue utilities

Details:

It was discovered that p11-kit incorrectly handled certain RPC messages. A
local attacker could use this issue to cause p11-kit to crash, resulting in
a denial of service. (CVE-2026-13757)

It was discovered that p11-kit incorrectly handled nested attribute
decoding on 32-bit systems. A local attacker could use this issue to cause
p11-kit to crash, resulting in a denial of service. (CVE-2026-18938)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  libp11-kit0                     0.25.3-4ubuntu2.2
  p11-kit                         0.25.3-4ubuntu2.2
  p11-kit-modules                 0.25.3-4ubuntu2.2

Ubuntu 22.04 LTS
  libp11-kit0                     0.24.0-6ubuntu0.1
  p11-kit                         0.24.0-6ubuntu0.1
  p11-kit-modules                 0.24.0-6ubuntu0.1

Ubuntu 20.04 LTS
  libp11-kit0                     0.23.20-1ubuntu0.1+esm1
                                  Available with Ubuntu Pro
  p11-kit                         0.23.20-1ubuntu0.1+esm1
                                  Available with Ubuntu Pro
  p11-kit-modules                 0.23.20-1ubuntu0.1+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libp11-kit0                     0.23.9-2ubuntu0.1+esm1
                                  Available with Ubuntu Pro
  p11-kit                         0.23.9-2ubuntu0.1+esm1
                                  Available with Ubuntu Pro
  p11-kit-modules                 0.23.9-2ubuntu0.1+esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8687-1
  CVE-2026-13757, CVE-2026-18938

Package Information:
  https://launchpad.net/ubuntu/+source/p11-kit/0.25.3-4ubun...
  https://launchpad.net/ubuntu/+source/p11-kit/0.24.0-6ubun...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=QG+r
-----END PGP SIGNATURE-----