Issued at: 2026-08-04
Updated at: 2026-08-08
Synopsis
Moderate: p11-kit security update
Description
The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.
Security Fix(es):
* p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9 aarch64
Rocky Linux 9 ppc64le
Rocky Linux 9 s390x
Rocky Linux 9 x86_64
Fixes
2494556
CVEs
CVE-2026-13757
Affected packages
Rocky Linux 9 aarch64 - BaseOS
p11-kit-0:0.26.4-1.el9_8.aarch64.rpm
p11-kit-0:0.26.4-1.el9_8.src.rpm
p11-kit-client-0:0.26.4-1.el9_8.aarch64.rpm
p11-kit-client-debuginfo-0:0.26.4-1.el9_8.aarch64.rpm
p11-kit-debuginfo-0:0.26.4-1.el9_8.aarch64.rpm
p11-kit-debugsource-0:0.26.4-1.el9_8.aarch64.rpm
p11-kit-trust-0:0.26.4-1.el9_8.aarch64.rpm
p11-kit-trust-debuginfo-0:0.26.4-1.el9_8.aarch64.rpm
Rocky Linux 9 x86_64 - BaseOS
p11-kit-0:0.26.4-1.el9_8.i686.rpm
p11-kit-0:0.26.4-1.el9_8.src.rpm
p11-kit-0:0.26.4-1.el9_8.x86_64.rpm
p11-kit-client-0:0.26.4-1.el9_8.x86_64.rpm
p11-kit-client-debuginfo-0:0.26.4-1.el9_8.x86_64.rpm
p11-kit-debuginfo-0:0.26.4-1.el9_8.i686.rpm
p11-kit-debuginfo-0:0.26.4-1.el9_8.x86_64.rpm
p11-kit-debugsource-0:0.26.4-1.el9_8.i686.rpm
p11-kit-debugsource-0:0.26.4-1.el9_8.x86_64.rpm
p11-kit-trust-0:0.26.4-1.el9_8.i686.rpm
p11-kit-trust-0:0.26.4-1.el9_8.x86_64.rpm
p11-kit-trust-debuginfo-0:0.26.4-1.el9_8.i686.rpm
p11-kit-trust-debuginfo-0:0.26.4-1.el9_8.x86_64.rpm
Rocky Linux 9 ppc64le - BaseOS
p11-kit-0:0.26.4-1.el9_8.ppc64le.rpm
p11-kit-0:0.26.4-1.el9_8.src.rpm
p11-kit-client-0:0.26.4-1.el9_8.ppc64le.rpm
p11-kit-client-debuginfo-0:0.26.4-1.el9_8.ppc64le.rpm
p11-kit-debuginfo-0:0.26.4-1.el9_8.ppc64le.rpm
p11-kit-debugsource-0:0.26.4-1.el9_8.ppc64le.rpm
p11-kit-trust-0:0.26.4-1.el9_8.ppc64le.rpm
p11-kit-trust-debuginfo-0:0.26.4-1.el9_8.ppc64le.rpm
Rocky Linux 9 s390x - BaseOS
p11-kit-0:0.26.4-1.el9_8.s390x.rpm
p11-kit-0:0.26.4-1.el9_8.src.rpm
p11-kit-client-0:0.26.4-1.el9_8.s390x.rpm
p11-kit-client-debuginfo-0:0.26.4-1.el9_8.s390x.rpm
p11-kit-debuginfo-0:0.26.4-1.el9_8.s390x.rpm
p11-kit-debugsource-0:0.26.4-1.el9_8.s390x.rpm
p11-kit-trust-0:0.26.4-1.el9_8.s390x.rpm
p11-kit-trust-debuginfo-0:0.26.4-1.el9_8.s390x.rpm
Rocky Linux 9 aarch64 - AppStream
p11-kit-devel-0:0.26.4-1.el9_8.aarch64.rpm
p11-kit-server-0:0.26.4-1.el9_8.aarch64.rpm
p11-kit-server-debuginfo-0:0.26.4-1.el9_8.aarch64.rpm
Rocky Linux 9 x86_64 - AppStream
p11-kit-devel-0:0.26.4-1.el9_8.i686.rpm
p11-kit-devel-0:0.26.4-1.el9_8.x86_64.rpm
p11-kit-server-0:0.26.4-1.el9_8.x86_64.rpm
p11-kit-server-debuginfo-0:0.26.4-1.el9_8.x86_64.rpm
Rocky Linux 9 ppc64le - AppStream
p11-kit-devel-0:0.26.4-1.el9_8.ppc64le.rpm
p11-kit-server-0:0.26.4-1.el9_8.ppc64le.rpm
p11-kit-server-debuginfo-0:0.26.4-1.el9_8.ppc64le.rpm
Rocky Linux 9 s390x - AppStream
p11-kit-devel-0:0.26.4-1.el9_8.s390x.rpm
p11-kit-server-0:0.26.4-1.el9_8.s390x.rpm
p11-kit-server-debuginfo-0:0.26.4-1.el9_8.s390x.rpm