ELSA-2021-1609

ELSA-2021-1609 - p11-kit security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2021-05-25

Description

[0.23.22-1]
- Rebase to 0.23.22 to fix memory safety issues (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363)
- Preserve DT_NEEDED information from the previous version, flagged by rpmdiff
- Add xsltproc to BR

[0.23.21-4]
- Fix realloc usage on proxy cleanup (#1894979)
- Make 'trust anchor --store' preserve all attributes from .p11-kit files

[0.23.21-3]
- Restore clobbered changelog entry

[0.23.21-2]
- Update p11-kit-invalid-config.patch to be more thorough (thanks to
Alexander Sosedkin)

[0.23.21-1]
- Update to upstream 0.23.21 release

Related CVEs

CVE-2020-29363

CVE-2020-29361

CVE-2020-29362

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	p11-kit-0.23.22-1.el8.src.rpm	f35415e5415a053171edc673c5443703	-
	p11-kit-0.23.22-1.el8.aarch64.rpm	47ecceb226c9fc2ec1511d69b58f8f18	-
	p11-kit-devel-0.23.22-1.el8.aarch64.rpm	1aaf9b058bdd84a720d5181504d43d42	-
	p11-kit-server-0.23.22-1.el8.aarch64.rpm	6793f9b832a84e1f73d9a252de23b618	-
	p11-kit-trust-0.23.22-1.el8.aarch64.rpm	0e5222b58870b07d0a5837ee30498619	-
Oracle Linux 8 (x86_64)	p11-kit-0.23.22-1.el8.src.rpm	f35415e5415a053171edc673c5443703	-
	p11-kit-0.23.22-1.el8.i686.rpm	e6b219f118309e879943105761e5cce8	-
	p11-kit-0.23.22-1.el8.x86_64.rpm	517ffff2f4234eac3d964fafe812fe07	-
	p11-kit-devel-0.23.22-1.el8.i686.rpm	61a2d98ee5932d2cbf2d988ac9610300	-
	p11-kit-devel-0.23.22-1.el8.x86_64.rpm	8fa99873883445327625de4e65b75e20	-
	p11-kit-server-0.23.22-1.el8.x86_64.rpm	887075822bcf77fb3a6fd15638e29985	-
	p11-kit-trust-0.23.22-1.el8.i686.rpm	6a1226c77da128aad260a42e966efe1f	-
	p11-kit-trust-0.23.22-1.el8.x86_64.rpm	8d0ac0466ca3d746ae66367dd39d7c27	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team