p PatchFirst

SUSE-SU-2026:24255-1

SUSE-SU-2026:24255-1 · Security update for p11-kit

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for p11-kit fixes the following issues: - CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). - CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems (bsc#1280702).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • p11-kit SUSE:Linux Enterprise Server 16.0

    Affected ranges
    • ECOSYSTEM: < 0.25.5-160000.3.1

    Update to 0.25.5-160000.3.1

  • p11-kit SUSE:Linux Enterprise Server for SAP applications 16.0

    Affected ranges
    • ECOSYSTEM: < 0.25.5-160000.3.1

    Update to 0.25.5-160000.3.1

Original sources

Check your server →