DSA-4822-1 p11-kit -- security update

Debian Security Advisory

DSA-4822-1 p11-kit -- security update

Date Reported:

01 Jan 2021

Affected Packages:

p11-kit

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2020-29361, CVE-2020-29362, CVE-2020-29363.

More information:

David Cook reported several memory safety issues affecting the RPC protocol in p11-kit, a library providing a way to load and enumerate PKCS#11 modules.

For the stable distribution (buster), these problems have been fixed in version 0.23.15-2+deb10u1.

We recommend that you upgrade your p11-kit packages.

For the detailed security status of p11-kit please refer to its security tracker page at: https://security-tracker.debian.org/tracker/p11-kit