[From nobody Sat Aug 15 18:11:07 2026 Received: (at 1144476-close) by bugs.debian.org; 15 Aug 2026 17:09:38 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 96; hammy, 150; neutral, 126; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:52342) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wvHt4-007EVK-2X for 1144476-close@bugs.debian.org; Sat, 15 Aug 2026 17:09:38 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wvHt3-0099Ru-0z for 1144476-close@bugs.debian.org; Sat, 15 Aug 2026 17:09:37 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=aRxypEOnpT7TGi+btL7zt2vIIdGwAoKurLvyS6RGWk8=; b=TbaCM0jTZ3qwfZzYrOtACzQa3v +u6JS2OZyyx2Tv0JGw5FvDQ/QM+/jZxOyjsoeiO42h3t614mTB9ab2P5EIMME9dK+JLYaGlPs6f1r jSwHAkVsZW8dDU9I44cW77AvC/StTSXyxDtQ9WAj4woKF3NcJtbam3SIHRybVK82LN+UHeGdD4Cx/ myo9GrZJaRIT/N14fDwHG/r2wVVglBCQdD+x9plAg1nV/qfVhmhlHLskc/T0fXBqXBOUSBMFybnmu 24rA2mwD13sRoX10Mqvseaalh+68pEidYBzyrD98/tVdnq6rJbM/xhcdSkdDlImQgzS/DLOt8cL57 pyBP92SA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wvHt2-000000075Xy-1YpP; Sat, 15 Aug 2026 17:09:36 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Andreas Metzler <ametzler@debian.org> To: 1144476-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: p11-kit Debian: DAK Debian-Changes: p11-kit_0.26.5-1_multi.changes Debian-Source: p11-kit Debian-Version: 0.26.5-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1144476: fixed in p11-kit 0.26.5-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============0992540134147729840==" Message-Id: <E1wvHt2-000000075Xy-1YpP@fasolo.debian.org> Date: Sat, 15 Aug 2026 17:09:36 +0000 --===============0992540134147729840== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: p11-kit Source-Version: 0.26.5-1 Done: Andreas Metzler <ametzler@debian.org> We believe that the bug you reported is fixed in the latest version of p11-kit, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1144476@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Metzler <ametzler@debian.org> (supplier of updated p11-kit package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 15 Aug 2026 17:51:12 +0200 Source: p11-kit Architecture: source Version: 0.26.5-1 Distribution: unstable Urgency: medium Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.o= rg> Changed-By: Andreas Metzler <ametzler@debian.org> Closes: 1144476 Changes: p11-kit (0.26.5-1) unstable; urgency=3Dmedium . * New upstream version. + rpc: guard against overflow when decoding nested attributes (CVE-2026-18938) Closes: #1144476 Checksums-Sha1:=20 354e182ad251def9ba6fb455ab86db45e167a23d 2541 p11-kit_0.26.5-1.dsc 6a2032f2488dfb810bacd393fd9feaf0e4a7ed00 1082584 p11-kit_0.26.5.orig.tar.xz ab111f33bb5a01a7feaa6e4494983778a71f261c 228 p11-kit_0.26.5.orig.tar.xz.asc 098f8368460f8dd1c1a8e952f6a2a35829ac7e54 24628 p11-kit_0.26.5-1.debian.tar.xz Checksums-Sha256:=20 042a8c16de5351864938d98f73e0b7f179ec5f23d33800b312dd3117c015bd28 2541 p11-ki= t_0.26.5-1.dsc f2cc09111e44bf3fea58f023180b33acea90aa82d042d6fbb623fbc5ba033bb7 1082584 p11= -kit_0.26.5.orig.tar.xz ce4e85963532772baf57dc7c63d6cc537dec2ea27a6dc49cf25028488e85c2ec 228 p11-kit= _0.26.5.orig.tar.xz.asc a40a4ea9e417f99c1c00e3f55b232a457ad81f2eb79271fdc9c4f4dd1a925e3e 24628 p11-k= it_0.26.5-1.debian.tar.xz Files:=20 1543c82b954a7c27dfe8a0743193bbbd 2541 libs optional p11-kit_0.26.5-1.dsc 308306e889850bff08fae74ae7897a21 1082584 libs optional p11-kit_0.26.5.orig.t= ar.xz 895ef8440b624e41652db746ba32092c 228 libs optional p11-kit_0.26.5.orig.tar.x= z.asc 4fa7d48a23f9b39f1c9f1a3239471f02 24628 libs optional p11-kit_0.26.5-1.debian= .tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAmqAjbAACgkQpU8BhUOC FISZTQ//dZCYuS3hLKfgUK3kMIatuEgqwUpH5shkjhwA1oFi+Knpsz18Dp8+KTZh OQRJCzbSTzSf74qtCEMCgiFBdndVKMUKWNr+q34/nCiH+044lTkkD6govzqk3evX eG67hBpGP6Vu+/VZ/brls1gdJaNLKSSMuw7VzB+dxbkMyAYVxdYMR6uPAemZxR5j cxDttc1+lvF1X83H8g0I3LKdRHNHuwb7LLZd6K5LV9JWgBOyt6dJAPVRjkNoKmRZ 5GgBdAxcZLfWrovpi090ydG34ZIeUhxQnBPio1nuWqk3o0vQwwgONVzeGSSibu26 nZ+8WvQxqUxQvaCXnL9mE9v8uPsMItpCv5jxEbsdgEfamh+r8YuMMHrW8HbZsI2+ NiWdatM5aVwbX1s9On8e0u3WXDAl4lqIqupa3DOpIKy5mQmc6vRF2+IT1vjvjUD6 Iv6whZAruT/+UItkcMn3xn2UISnKJA7d+Y4Rn8NVnk5IDEMuPAN3qYmypUKpXlsX 5mi84MdvAnCxqVVxAU0WiQmcsTMOH1bDnHZDKw+JldtMhpgtLaLn+0ridS/LMhTr iaAHVUy0RwYIFdJQaDFcAnbRDRuRDJ/LSdeWmUhtTAujaUid28HUmeGLJlD/Hd06 mz16lvvv4zEuyhEDYVP0MFME/IYcxJG3mSrDWdeUlW9UcKHDOSk=3D =3D3O5D -----END PGP SIGNATURE----- --===============0992540134147729840== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaoCdUAAKCRCb9qggYcy5 IX7qAPsF3XKShLJ0eDyMkfhQlFM4aa/OZqLqSuFUTTTLFuFEcgD+JWuNxHCzPCFO z2EKDlwaQmkF0StS2Rh8IWoaJKGgSAE= =oYEI -----END PGP SIGNATURE----- --===============0992540134147729840==-- ]