Red Hat Product Errata RHSA-2026:49668 - Security Advisory Issued: 2026-08-03 Updated: 2026-08-03 RHSA-2026:49668 - Security Advisory Overview Updated Packages Synopsis Moderate: p11-kit security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for p11-kit is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files. Security Fix(es): p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2494556 - CVE-2026-13757 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing CVEs CVE-2026-13757 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM p11-kit-0.26.4-1.el10_2.src.rpm SHA-256: a8ebf6e5ba76f0e258ca09d9e87cf269f2de9c7667cb03655a8f0242fbdce67f x86_64 p11-kit-0.26.4-1.el10_2.x86_64.rpm SHA-256: 3f569bf68505b5e24e87ccf273984f5db8bdf4b8a539bc6fc133a615eb3da2f3 p11-kit-client-0.26.4-1.el10_2.x86_64.rpm SHA-256: 76bd5e1413829d8945d9484843b1708da03e7c70d4c908535f535b483bf9f856 p11-kit-client-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 4af30d57266c58c9715bef1a7d8b73f45fb64e019e329d49d3aa474e9dc30cab p11-kit-client-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 4af30d57266c58c9715bef1a7d8b73f45fb64e019e329d49d3aa474e9dc30cab p11-kit-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: fd5ddc276e5490dbd3eadeb6689426f29a2767cf0cf727b6f9105e5720ccde01 p11-kit-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: fd5ddc276e5490dbd3eadeb6689426f29a2767cf0cf727b6f9105e5720ccde01 p11-kit-debugsource-0.26.4-1.el10_2.x86_64.rpm SHA-256: 345c97e4115b64ae6bfe804ccf981cf5f7858a10bbbcc93c74b1d2a5c0f837e9 p11-kit-debugsource-0.26.4-1.el10_2.x86_64.rpm SHA-256: 345c97e4115b64ae6bfe804ccf981cf5f7858a10bbbcc93c74b1d2a5c0f837e9 p11-kit-devel-0.26.4-1.el10_2.x86_64.rpm SHA-256: 41ddcfb04dc1014e5b93c0d4331fe068a9b45e7f5aa72001ccb98c94249987ce p11-kit-server-0.26.4-1.el10_2.x86_64.rpm SHA-256: a34eb709df16671e5cbea83146a7c23bfffeaf2ef02050636b9542d4c2c22eee p11-kit-server-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 160a88af90dd8106e3036b143a20badaf16952c7fc05f306af3fc40da5a371e2 p11-kit-server-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 160a88af90dd8106e3036b143a20badaf16952c7fc05f306af3fc40da5a371e2 p11-kit-trust-0.26.4-1.el10_2.x86_64.rpm SHA-256: 05a213cf13dc23e408c4647400fafba00c3931970e96e5f356bec2077add59d3 p11-kit-trust-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 7573c3c99757516769b22e56c6192ab530677cf34e250826343c11b66213526b p11-kit-trust-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 7573c3c99757516769b22e56c6192ab530677cf34e250826343c11b66213526b Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM p11-kit-0.26.4-1.el10_2.src.rpm SHA-256: a8ebf6e5ba76f0e258ca09d9e87cf269f2de9c7667cb03655a8f0242fbdce67f x86_64 p11-kit-0.26.4-1.el10_2.x86_64.rpm SHA-256: 3f569bf68505b5e24e87ccf273984f5db8bdf4b8a539bc6fc133a615eb3da2f3 p11-kit-client-0.26.4-1.el10_2.x86_64.rpm SHA-256: 76bd5e1413829d8945d9484843b1708da03e7c70d4c908535f535b483bf9f856 p11-kit-client-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 4af30d57266c58c9715bef1a7d8b73f45fb64e019e329d49d3aa474e9dc30cab p11-kit-client-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 4af30d57266c58c9715bef1a7d8b73f45fb64e019e329d49d3aa474e9dc30cab p11-kit-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: fd5ddc276e5490dbd3eadeb6689426f29a2767cf0cf727b6f9105e5720ccde01 p11-kit-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: fd5ddc276e5490dbd3eadeb6689426f29a2767cf0cf727b6f9105e5720ccde01 p11-kit-debugsource-0.26.4-1.el10_2.x86_64.rpm SHA-256: 345c97e4115b64ae6bfe804ccf981cf5f7858a10bbbcc93c74b1d2a5c0f837e9 p11-kit-debugsource-0.26.4-1.el10_2.x86_64.rpm SHA-256: 345c97e4115b64ae6bfe804ccf981cf5f7858a10bbbcc93c74b1d2a5c0f837e9 p11-kit-devel-0.26.4-1.el10_2.x86_64.rpm SHA-256: 41ddcfb04dc1014e5b93c0d4331fe068a9b45e7f5aa72001ccb98c94249987ce p11-kit-server-0.26.4-1.el10_2.x86_64.rpm SHA-256: a34eb709df16671e5cbea83146a7c23bfffeaf2ef02050636b9542d4c2c22eee p11-kit-server-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 160a88af90dd8106e3036b143a20badaf16952c7fc05f306af3fc40da5a371e2 p11-kit-server-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 160a88af90dd8106e3036b143a20badaf16952c7fc05f306af3fc40da5a371e2 p11-kit-trust-0.26.4-1.el10_2.x86_64.rpm SHA-256: 05a213cf13dc23e408c4647400fafba00c3931970e96e5f356bec2077add59d3 p11-kit-trust-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 7573c3c99757516769b22e56c6192ab530677cf34e250826343c11b66213526b p11-kit-trust-debuginfo-0.26.4-1.el10_2.x86_64.rpm SHA-256: 7573c3c99757516769b22e56c6192ab530677cf34e250826343c11b66213526b Red Hat Enterprise Linux for IBM z Systems 10 SRPM p11-kit-0.26.4-1.el10_2.src.rpm SHA-256: a8ebf6e5ba76f0e258ca09d9e87cf269f2de9c7667cb03655a8f0242fbdce67f s390x p11-kit-0.26.4-1.el10_2.s390x.rpm SHA-256: 4653e905edde8b9861e85494d03a61de3b8c0d7c9f5dab71c9ec66c07a65f62e p11-kit-client-0.26.4-1.el10_2.s390x.rpm SHA-256: f8e341319bccf00bae7db6c0975a710337d9e8ed162197f34d92a85a2868bed9 p11-kit-client-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 5158a2da400a7e0fbe8a0943418e202a1c18b56ee7151b7145e504709745378f p11-kit-client-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 5158a2da400a7e0fbe8a0943418e202a1c18b56ee7151b7145e504709745378f p11-kit-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 36b62498cbb08ba27f59692d338d1b47df0e7c25ee3c10e5e41d0bc70d105f40 p11-kit-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 36b62498cbb08ba27f59692d338d1b47df0e7c25ee3c10e5e41d0bc70d105f40 p11-kit-debugsource-0.26.4-1.el10_2.s390x.rpm SHA-256: 1b5767a8a25062e6fb1da73f03dcfc6fe7874254fdeab725a56bdc1c55b7cdd3 p11-kit-debugsource-0.26.4-1.el10_2.s390x.rpm SHA-256: 1b5767a8a25062e6fb1da73f03dcfc6fe7874254fdeab725a56bdc1c55b7cdd3 p11-kit-devel-0.26.4-1.el10_2.s390x.rpm SHA-256: b5bc9b66c5a9f4784d900e8931c7e88dc81c26c23cd3474312b01227c095058e p11-kit-server-0.26.4-1.el10_2.s390x.rpm SHA-256: 63c50b37e65c647f62f016fd6c0ead724ad9c8c763ca668c17a405b445721130 p11-kit-server-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 87436c06ab544f7e21e95a24fdb9cf40c0f9c9541fde2625cf17fc7340be7edc p11-kit-server-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 87436c06ab544f7e21e95a24fdb9cf40c0f9c9541fde2625cf17fc7340be7edc p11-kit-trust-0.26.4-1.el10_2.s390x.rpm SHA-256: f06996d0e4f7a0386205054328e8c867fffd2cbdb202373e48285294db4dbe20 p11-kit-trust-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 81713b6a6592f94ecf663ea86f7705e8bedbea42cd1a9919260d08e98ee93b7f p11-kit-trust-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 81713b6a6592f94ecf663ea86f7705e8bedbea42cd1a9919260d08e98ee93b7f Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM p11-kit-0.26.4-1.el10_2.src.rpm SHA-256: a8ebf6e5ba76f0e258ca09d9e87cf269f2de9c7667cb03655a8f0242fbdce67f s390x p11-kit-0.26.4-1.el10_2.s390x.rpm SHA-256: 4653e905edde8b9861e85494d03a61de3b8c0d7c9f5dab71c9ec66c07a65f62e p11-kit-client-0.26.4-1.el10_2.s390x.rpm SHA-256: f8e341319bccf00bae7db6c0975a710337d9e8ed162197f34d92a85a2868bed9 p11-kit-client-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 5158a2da400a7e0fbe8a0943418e202a1c18b56ee7151b7145e504709745378f p11-kit-client-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 5158a2da400a7e0fbe8a0943418e202a1c18b56ee7151b7145e504709745378f p11-kit-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 36b62498cbb08ba27f59692d338d1b47df0e7c25ee3c10e5e41d0bc70d105f40 p11-kit-debuginfo-0.26.4-1.el10_2.s390x.rpm SHA-256: 36b62498cbb08ba27f59692d338d1b47df0e7c25ee3c10e5e41d0bc70d105f40 p11-kit-debugsource-0.26.4-1.el10_2.s390x.rpm SHA-256: 1b5767a8a25062e6fb1da73f03dcfc6fe7874254fdeab725a56bdc1c55b7cdd3 p11-kit-debugsource-0.26.4-1.el10_2.s390x.rpm SHA-256: 1b5767a8a25062e6fb1da73f03dcfc6fe7874254fdeab725a56bdc1c55b7cdd3 p11-kit-devel-0.26.4-1.el10_2.s390x.rpm SHA-256: b5bc9b66c5a9f4784d900e8931c7e88dc81c26c23cd3474312b01227c095058e p11-k