[From nobody Sat Jul 11 14:21:06 2026 Received: (at 1141184-close) by bugs.debian.org; 11 Jul 2026 13:19:55 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 111; hammy, 150; neutral, 136; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:41578) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wiXcZ-004qHk-2v for 1141184-close@bugs.debian.org; Sat, 11 Jul 2026 13:19:55 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wiXcY-00031O-0t for 1141184-close@bugs.debian.org; Sat, 11 Jul 2026 13:19:53 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=XqBmHcIR5zrsxkaoYhRE2sFbcFBJb4tbnRSHFiXfR6w=; b=nuvrzjv1rp2onPDamKbpmZREa6 5Plsc59aF2jHQ79CKsy4Tmr08RleTq9E/x7oYDCQHmV/Vu1/pbu2c0quv30AAqbiyu8V/lNzawF4Y 5gjoIvchxEu7CQqItBx7JSfoBfewdgwqQ2Bgf8yu9QmfUPQdeDdajWEdkKmdpxcsDQUzIIWpNxAXP s3rRRGz4TfQ4ew7fyV3gljwIn9BG/NpA8OCT1I6mDTUz9n4Rd9qlYFzrbxj93oAs2u0jWA0zc4fqs deRjgZQP6cLUzrO7Edj5R9pRCS3WOw4CBeppBDlaVhhSh7wdSoPv8IVqsHS6aAkeiOUgPg3wVSH67 RZh115sA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wiXcW-00000006Ecl-2RMJ; Sat, 11 Jul 2026 13:19:52 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Andreas Metzler <ametzler@debian.org> To: 1141184-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: p11-kit Debian: DAK Debian-Changes: p11-kit_0.26.4-1_multi.changes Debian-Source: p11-kit Debian-Version: 0.26.4-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141184: fixed in p11-kit 0.26.4-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3318387830485641199==" Message-Id: <E1wiXcW-00000006Ecl-2RMJ@fasolo.debian.org> Date: Sat, 11 Jul 2026 13:19:52 +0000 --===============3318387830485641199== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: p11-kit Source-Version: 0.26.4-1 Done: Andreas Metzler <ametzler@debian.org> We believe that the bug you reported is fixed in the latest version of p11-kit, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141184@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Metzler <ametzler@debian.org> (supplier of updated p11-kit package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Jul 2026 15:01:13 +0200 Source: p11-kit Architecture: source Version: 0.26.4-1 Distribution: unstable Urgency: medium Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.o= rg> Changed-By: Andreas Metzler <ametzler@debian.org> Closes: 1141184 Changes: p11-kit (0.26.4-1) unstable; urgency=3Dmedium . * New upstream version. + server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit (CVE-2026-13757) Closes: #1141184 + Drop 40-Fix-autoreconf-error-with-gettext-1.0.patch * Use debhelper-compat v14. Checksums-Sha1:=20 899b90ebae49cfe420e888cb00ef5e53a022cc1f 2541 p11-kit_0.26.4-1.dsc 2c50b7695f11d0de52e23b1320675b15f9a1042b 1081912 p11-kit_0.26.4.orig.tar.xz 479a182b6f30b527f72e6d4616541ca58f85343e 228 p11-kit_0.26.4.orig.tar.xz.asc 01f9f5018b19c8fb7957346d1028356f1e5143bf 24564 p11-kit_0.26.4-1.debian.tar.xz Checksums-Sha256:=20 7d84cf28d361f0ff3fc3d84ca4f8af055dafe6fc3c9ff4321a5b7eb74106e5de 2541 p11-ki= t_0.26.4-1.dsc 89c3ffb10e076ee036e14732bf6547a1e1c4fb48699a5dee7ceb5ce4f7c0c462 1081912 p11= -kit_0.26.4.orig.tar.xz d90cf61ce8586e7cbd00088057ad8f1b6ef5fba0bff085a16ffca99b8e72289e 228 p11-kit= _0.26.4.orig.tar.xz.asc 1c90bd8e284394c651748da318021eaaa6f5f1e728bc4793b88fe9fed10aff0a 24564 p11-k= it_0.26.4-1.debian.tar.xz Files:=20 f16992c829a40be1458a6d84938d0f1e 2541 libs optional p11-kit_0.26.4-1.dsc 4c0d2f26fd93278f5b0d22ec917cf030 1081912 libs optional p11-kit_0.26.4.orig.t= ar.xz 267f97ce4a4eda6794cbdb0555dadadb 228 libs optional p11-kit_0.26.4.orig.tar.x= z.asc 060365a613b1c4893859adfea825e6a6 24564 libs optional p11-kit_0.26.4-1.debian= .tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAmpSP1AACgkQpU8BhUOC FIQo1w//cJM8O3RkI+A0oPDArqVJtGwkI3D6eLIi+rwpvwPe3VCbFbf3gPjm5iXb ZcQTt9nPTK7d0pycuXF32vUJGoJyPuIBgxQ81CDXhEeF8Eer9ZfaWtoQb8FF1DZu 4RtP8zZ2JXSq/A9b/B1iKAdRiPOnkNmiyFyiGp7rWpm6lvRlqCj4r7UIoKf2zD1b I2/3FdrkJ9+Dvi3mOH066MDQQl1U1TR3qp1y8wBYe61crWAtIKxPkhymZwcsvLO2 A+iYnRc1X71+4SnAER9ejD3I1rNHi71FZeKkJd+N0lmOLzQnJQdxT2Z+wceIBgGU P3BpDwQl6NIe3n7PG6uWRia8IUd4/e6g5ZEFtketGK2isTQ2we8U/sWVsndxabWP mnEMz/rodgNJx+8SZ76V09dlL2Ml8hi2apc2ItJ8IV7o4knWwPe10+pu7tyoIe4x 1D64XF4SDY5GIIsGLZyWgOWUaZiBIPRX1O7Eyoeu1gwhmUId9UKhr0n06E7hFATZ tGzZKuuwhqjX4+y8EjA+IoNo3PBbsvmpNtDyLF6axfaAPxd1E5nIMUre+qgfqEIU RvhhzzkvqlnXbeJD8jmjgZWGjBN3RKS1BuRxy1zV3aWmIjG6MzePC+dcyuEmK6s/ NKMDSin0Ie//6lokTMkk+dPZ/sicGSxtGJLVS7aoGF33LtfrZYU=3D =3DBGWk -----END PGP SIGNATURE----- --===============3318387830485641199== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCalJC+AAKCRCb9qggYcy5 IZC4AQDc7Z6RL6e7fbjzYD9g6TAcF+nIjRVPhZi09Qi/1/pN4wD/fvTh+br4Yi3f GTgY11Sz10kX8bY+0FxgJ/njcvGCrAI= =04o0 -----END PGP SIGNATURE----- --===============3318387830485641199==-- ]