Red Hat Product Errata RHSA-2026:49667 - Security Advisory Issued: 2026-08-03 Updated: 2026-08-03 RHSA-2026:49667 - Security Advisory Overview Updated Packages Synopsis Moderate: p11-kit security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for p11-kit is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files. Security Fix(es): p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2494556 - CVE-2026-13757 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing CVEs CVE-2026-13757 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM p11-kit-0.26.4-1.el9_8.src.rpm SHA-256: 6f06a4f6812fce869528ff17ab002d655a8da18fc745eafa6c02594bb23dfeeb x86_64 p11-kit-0.26.4-1.el9_8.i686.rpm SHA-256: 3968e7bda591eba25915033c1c716b61ef34d3c70be506d54a8a60be74ba902c p11-kit-0.26.4-1.el9_8.x86_64.rpm SHA-256: a00ba14bfd0fc5dd2818f605f2e0520b52ea4b36167504c2523f92a065c2bdaf p11-kit-client-0.26.4-1.el9_8.x86_64.rpm SHA-256: d505c3909a20297fdc4a257878d51a6627d1c615240052acebda7fbdcc500a9d p11-kit-client-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: 58e40661bb75c8aef7593d047eed974814dcce5f597520501198cbdb0d14ee0e p11-kit-client-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: 58e40661bb75c8aef7593d047eed974814dcce5f597520501198cbdb0d14ee0e p11-kit-client-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 19a62bd01c492ec245309b141ae48ca47bd4f99ca28c84111b9ce43d8ad6a8d3 p11-kit-client-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 19a62bd01c492ec245309b141ae48ca47bd4f99ca28c84111b9ce43d8ad6a8d3 p11-kit-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: 1922480c25af7a292eb0a28c37ac82da40a95b407d0b09aaabc13be716633e87 p11-kit-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: 1922480c25af7a292eb0a28c37ac82da40a95b407d0b09aaabc13be716633e87 p11-kit-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 1912108f0b04ee84fc8fa1cf15d3841bea90e72da0e902fe78acd86175ebf0b3 p11-kit-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 1912108f0b04ee84fc8fa1cf15d3841bea90e72da0e902fe78acd86175ebf0b3 p11-kit-debugsource-0.26.4-1.el9_8.i686.rpm SHA-256: df4476448431641f9cbec736628028f8cd052f6758886519f174074dea92d3c8 p11-kit-debugsource-0.26.4-1.el9_8.i686.rpm SHA-256: df4476448431641f9cbec736628028f8cd052f6758886519f174074dea92d3c8 p11-kit-debugsource-0.26.4-1.el9_8.x86_64.rpm SHA-256: 0cb41cddacb074dc4330c1f01e7e787c2742921c0d7017d82859023756a1be58 p11-kit-debugsource-0.26.4-1.el9_8.x86_64.rpm SHA-256: 0cb41cddacb074dc4330c1f01e7e787c2742921c0d7017d82859023756a1be58 p11-kit-devel-0.26.4-1.el9_8.i686.rpm SHA-256: f3cb5146a33a7678f5e1fcbdc7236ced2952510526917c98785d4daa21ef0ffd p11-kit-devel-0.26.4-1.el9_8.x86_64.rpm SHA-256: 1d5d34b4ca4c4d2405c14b3a7fd424b136dfb34878afcf522d64dbbc1c3aae9d p11-kit-server-0.26.4-1.el9_8.x86_64.rpm SHA-256: 76086f14f5db5abf8f65f416bb16cd17c6bb413468f5860400ce286a42a098dc p11-kit-server-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: dc5f8acdf0016845cfde32ba8e9a0925ae44bcbe52610de40aaadeeb850d4600 p11-kit-server-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: dc5f8acdf0016845cfde32ba8e9a0925ae44bcbe52610de40aaadeeb850d4600 p11-kit-server-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 81366cd8cd704fb6e7e6a9819f5ab9e7fe0cf8c2d6d3216fbaf12c12f13797f0 p11-kit-server-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 81366cd8cd704fb6e7e6a9819f5ab9e7fe0cf8c2d6d3216fbaf12c12f13797f0 p11-kit-trust-0.26.4-1.el9_8.i686.rpm SHA-256: b4cac79a546be1e5699466626e1f64c2265120b94e280e31532639a1f520c1c0 p11-kit-trust-0.26.4-1.el9_8.x86_64.rpm SHA-256: 41b84ab0ee4cf914d570a3d648ed98b7de44cef73ea3dfa58ff5eebdec85f42a p11-kit-trust-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: ad979fbbd9cbdb9c944c7e16fba4dc202981f16eacb7c86144bb1a0d4b280d5e p11-kit-trust-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: ad979fbbd9cbdb9c944c7e16fba4dc202981f16eacb7c86144bb1a0d4b280d5e p11-kit-trust-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: abf194701210123ef178e35877e2c5598153e89c605b6687f5dfc2837719eb00 p11-kit-trust-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: abf194701210123ef178e35877e2c5598153e89c605b6687f5dfc2837719eb00 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM p11-kit-0.26.4-1.el9_8.src.rpm SHA-256: 6f06a4f6812fce869528ff17ab002d655a8da18fc745eafa6c02594bb23dfeeb x86_64 p11-kit-0.26.4-1.el9_8.i686.rpm SHA-256: 3968e7bda591eba25915033c1c716b61ef34d3c70be506d54a8a60be74ba902c p11-kit-0.26.4-1.el9_8.x86_64.rpm SHA-256: a00ba14bfd0fc5dd2818f605f2e0520b52ea4b36167504c2523f92a065c2bdaf p11-kit-client-0.26.4-1.el9_8.x86_64.rpm SHA-256: d505c3909a20297fdc4a257878d51a6627d1c615240052acebda7fbdcc500a9d p11-kit-client-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: 58e40661bb75c8aef7593d047eed974814dcce5f597520501198cbdb0d14ee0e p11-kit-client-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: 58e40661bb75c8aef7593d047eed974814dcce5f597520501198cbdb0d14ee0e p11-kit-client-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 19a62bd01c492ec245309b141ae48ca47bd4f99ca28c84111b9ce43d8ad6a8d3 p11-kit-client-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 19a62bd01c492ec245309b141ae48ca47bd4f99ca28c84111b9ce43d8ad6a8d3 p11-kit-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: 1922480c25af7a292eb0a28c37ac82da40a95b407d0b09aaabc13be716633e87 p11-kit-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: 1922480c25af7a292eb0a28c37ac82da40a95b407d0b09aaabc13be716633e87 p11-kit-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 1912108f0b04ee84fc8fa1cf15d3841bea90e72da0e902fe78acd86175ebf0b3 p11-kit-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 1912108f0b04ee84fc8fa1cf15d3841bea90e72da0e902fe78acd86175ebf0b3 p11-kit-debugsource-0.26.4-1.el9_8.i686.rpm SHA-256: df4476448431641f9cbec736628028f8cd052f6758886519f174074dea92d3c8 p11-kit-debugsource-0.26.4-1.el9_8.i686.rpm SHA-256: df4476448431641f9cbec736628028f8cd052f6758886519f174074dea92d3c8 p11-kit-debugsource-0.26.4-1.el9_8.x86_64.rpm SHA-256: 0cb41cddacb074dc4330c1f01e7e787c2742921c0d7017d82859023756a1be58 p11-kit-debugsource-0.26.4-1.el9_8.x86_64.rpm SHA-256: 0cb41cddacb074dc4330c1f01e7e787c2742921c0d7017d82859023756a1be58 p11-kit-devel-0.26.4-1.el9_8.i686.rpm SHA-256: f3cb5146a33a7678f5e1fcbdc7236ced2952510526917c98785d4daa21ef0ffd p11-kit-devel-0.26.4-1.el9_8.x86_64.rpm SHA-256: 1d5d34b4ca4c4d2405c14b3a7fd424b136dfb34878afcf522d64dbbc1c3aae9d p11-kit-server-0.26.4-1.el9_8.x86_64.rpm SHA-256: 76086f14f5db5abf8f65f416bb16cd17c6bb413468f5860400ce286a42a098dc p11-kit-server-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: dc5f8acdf0016845cfde32ba8e9a0925ae44bcbe52610de40aaadeeb850d4600 p11-kit-server-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: dc5f8acdf0016845cfde32ba8e9a0925ae44bcbe52610de40aaadeeb850d4600 p11-kit-server-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 81366cd8cd704fb6e7e6a9819f5ab9e7fe0cf8c2d6d3216fbaf12c12f13797f0 p11-kit-server-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: 81366cd8cd704fb6e7e6a9819f5ab9e7fe0cf8c2d6d3216fbaf12c12f13797f0 p11-kit-trust-0.26.4-1.el9_8.i686.rpm SHA-256: b4cac79a546be1e5699466626e1f64c2265120b94e280e31532639a1f520c1c0 p11-kit-trust-0.26.4-1.el9_8.x86_64.rpm SHA-256: 41b84ab0ee4cf914d570a3d648ed98b7de44cef73ea3dfa58ff5eebdec85f42a p11-kit-trust-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: ad979fbbd9cbdb9c944c7e16fba4dc202981f16eacb7c86144bb1a0d4b280d5e p11-kit-trust-debuginfo-0.26.4-1.el9_8.i686.rpm SHA-256: ad979fbbd9cbdb9c944c7e16fba4dc202981f16eacb7c86144bb1a0d4b280d5e p11-kit-trust-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: abf194701210123ef178e35877e2c5598153e89c605b6687f5dfc2837719eb00 p11-kit-trust-debuginfo-0.26.4-1.el9_8.x86_64.rpm SHA-256: abf194701210123ef178e35877e2c5598153e89c605b6687f5dfc2837719eb00 Red Hat Enterprise Linux for IBM z Systems 9 SRPM p11-kit-0.26.4-1.el9_8.src.rpm SHA-256: 6f06a4f6812fce869528ff17ab002d655a8da18fc745eafa6c02594bb23dfeeb s390x p11-kit-0