Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 441
Alerts This Week
Warning Icon 1 441

Fedora 44 p11-kit Important Stack Exhaustion RPC Attribute CVE-2026-13757

fedora
Calendar Grey July 11, 2026
Dist Fedora Esm H88
A Fedora 44 advisory fixing stack exhaustion and memory management issues in p11-kit to enhance security and functionality.
server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit (CVE-2026-13757) fixed confusing error message when trying to s...

Summary

p11-kit provides a way to load and enumerate PKCS#11 modules, as well

as a standard configuration setup for installing PKCS#11 modules in

such a way that they're discoverable.

Update Information:

server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit (CVE-2026-13757) fixed confusing error message when trying to store an existing cert with trust anchor fixed assert when parsing p11-kit files with value (") fixed numerous memory management issues Build and test fixes Updated translations

Change Log

* Fri Jul 10 2026 Packit - 0.26.4-1 - Update to 0.26.4 upstream release

References


[ 1 ] Bug #2494560 - CVE-2026-13757 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2494560 [ 2 ] Bug #2498946 - p11-kit-0.26.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2498946

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-695fd36daa' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: p11-kit
Product: Fedora 44
Version: 0.26.4
Release: 1.fc44
Summary: Library for loading and sharing PKCS#11 modules

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.