RHSA-2021:1609MediumCVSS 7.5

Red Hat Security Advisory: p11-kit security, bug fix, and enhancement update

Published
May 18, 2021
Last Modified
October 14, 2026

🔗 CVE IDs covered (3)

CVE-2020-29361 →CVE-2020-29362 →CVE-2020-29363 →

📋 Description

CVE-2020-29361 — p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers CVE-2020-29362 — p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c CVE-2020-29363 — p11-kit: out-of-bounds write in p11_rpc_buffer_get_byte_array_value function in rpc-message.c

🎯 Affected products41

  • Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-0:0.23.22-1.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-0:0.23.22-1.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-0:0.23.22-1.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-0:0.23.22-1.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-0:0.23.22-1.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-0:0.23.22-1.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-debuginfo-0:0.23.22-1.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-debuginfo-0:0.23.22-1.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-debuginfo-0:0.23.22-1.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-debuginfo-0:0.23.22-1.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-debuginfo-0:0.23.22-1.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-debugsource-0:0.23.22-1.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-debugsource-0:0.23.22-1.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-debugsource-0:0.23.22-1.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-debugsource-0:0.23.22-1.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-debugsource-0:0.23.22-1.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-devel-0:0.23.22-1.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-devel-0:0.23.22-1.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-devel-0:0.23.22-1.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-devel-0:0.23.22-1.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-devel-0:0.23.22-1.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-server-0:0.23.22-1.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-server-0:0.23.22-1.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-server-0:0.23.22-1.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-server-0:0.23.22-1.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-server-debuginfo-0:0.23.22-1.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-server-debuginfo-0:0.23.22-1.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-server-debuginfo-0:0.23.22-1.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • p11-kit-server-debuginfo-0:0.23.22-1.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • +11 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (9)