Ubuntu
p11-kit package

p11-kit 0.23.20-1ubuntu0.1 source package in Ubuntu

Changelog

p11-kit (0.23.20-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: multiple integer overflows
    - debian/patches/CVE-2020-29361-1.patch: check for arithmetic overflows
      before allocating in p11-kit/iter.c, p11-kit/lists.c,
      p11-kit/proxy.c, p11-kit/rpc-message.c, p11-kit/rpc-message.h,
      p11-kit/rpc-server.c, trust/index.c.
    - debian/patches/CVE-2020-29361-2.patch: follow-up to arithmetic
      overflow fix in common/compat.c, p11-kit/rpc-message.c.
    - CVE-2020-29361
  * SECURITY UPDATE: heap over-read in the RPC protocol
    - debian/patches/CVE-2020-29362.patch: fix bounds check in
      p11-kit/rpc-message.c.
    - CVE-2020-29362
  * SECURITY UPDATE: heap overflow in RPC protocol
    - debian/patches/CVE-2020-29363.patch: check attribute length against
      buffer size in p11-kit/rpc-message.c.
    - CVE-2020-29363

 -- Marc Deslauriers <email address hidden>  Mon, 04 Jan 2021 14:04:11 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main libs
Focal security main libs

Downloads

File Size SHA-256 Checksum
p11-kit_0.23.20.orig.tar.xz 803.3 KiB 14d86024c3dfd6b967d9bc0b4ec7b2973014fe7423481f4d230a1a63b8aa6104
p11-kit_0.23.20.orig.tar.xz.asc 854 bytes 6429a15c3c071629add6712ed75916df90043d47250edb9235d89ee197f613b8
p11-kit_0.23.20-1ubuntu0.1.debian.tar.xz 24.0 KiB 03907f95da792377a4b6e26b5eb29e73f537d2bbf812caa5a39e4b2db0a8ba48
p11-kit_0.23.20-1ubuntu0.1.dsc 2.5 KiB a06b390074ac4585ed49f5cf052f0b9837cfaba60e92c724d7b6253faf106403

View changes file

Binary packages built by this source

libp11-kit-dev: library for loading and coordinating access to PKCS#11 modules - development

 The p11-kit library provides a way to load and enumerate Public-Key
 Cryptography Standard #11 modules, along with a standard configuration
 setup for installing PKCS#11 modules so that they're discoverable. It
 also solves problems with coordinating the use of PKCS#11 by different
 components or libraries living in the same process.
 .
 This package contains the documentation and development headers required
 to build applications using the p11-kit library.

libp11-kit0: library for loading and coordinating access to PKCS#11 modules - runtime

 The p11-kit library provides a way to load and enumerate Public-Key
 Cryptography Standard #11 modules, along with a standard configuration
 setup for installing PKCS#11 modules so that they're discoverable. It
 also solves problems with coordinating the use of PKCS#11 by different
 components or libraries living in the same process.
 .
 This package contains the shared library required for applications loading
 and accessing PKCS#11 modules.

libp11-kit0-dbgsym: debug symbols for libp11-kit0
p11-kit: p11-glue utilities

 The p11-kit library provides a way to load and enumerate Public-Key
 Cryptography Standard #11 modules, along with a standard configuration
 setup for installing PKCS#11 modules so that they're discoverable. It
 also solves problems with coordinating the use of PKCS#11 by different
 components or libraries living in the same process.
 .
 This package contains the p11-kit tool for listing PKCS#11 modules.

p11-kit-dbgsym: debug symbols for p11-kit
p11-kit-modules: p11-glue proxy and trust modules

 The p11-kit library provides a way to load and enumerate Public-Key
 Cryptography Standard #11 modules, along with a standard configuration
 setup for installing PKCS#11 modules so that they're discoverable. It
 also solves problems with coordinating the use of PKCS#11 by different
 components or libraries living in the same process.
 .
 This package contains the p11-kit proxy module and the system trust
 policy module.

p11-kit-modules-dbgsym: debug symbols for p11-kit-modules