P11-Kit Security Update — AlmaLinux 9 (ALSA-2026:49667)

This is a security release for AlmaLinux 9. The fix ships in the current release line (referenced builds: 26.4-1). Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.

Medium 6.2 CVSS 2026-08-06

AlmaLinux 9

Fix Commands

EL8+ (AlmaLinux/CloudLinux/Rocky)

sudo dnf update

What this means under a SharedLicense license

p11-kit on AlmaLinux 9 is the exposure surface; the advisory's own severity data tops out at CVSS .

The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.

Security Fix(es):

* p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-…

Type:

security

Severity:

moderate

Release date:

2026-08-06

Description:

Security Fix(es):

* p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	p11-kit-devel-0.26.4-1.el9_8.aarch64.rpm	0066b821858bdc99446a32380d89a90749e74f7f476b53f40568cfa5989c11e1
aarch64	p11-kit-server-0.26.4-1.el9_8.aarch64.rpm	9073215fb911e28fa42b7040733b15b7d922b3f827f951e0389d6046b1127f30
aarch64	p11-kit-client-0.26.4-1.el9_8.aarch64.rpm	a86d1132cdb8181da59edfa42add983fb42281a1aa24e8e849d7ace863d5e509
aarch64	p11-kit-0.26.4-1.el9_8.aarch64.rpm	ce2e0d9788a48b4dc138587369e284e072ad28e35c5e429c5b3fcf272c94b33d
aarch64	p11-kit-trust-0.26.4-1.el9_8.aarch64.rpm	d97d867829777d40613ce0e4fd4723ad294810f7635d664c3244a162b5f23e2e
i686	p11-kit-devel-0.26.4-1.el9_8.i686.rpm	399d70371cdd038b88986ccec442e42476b1e11ab6707fd0cf613ab89a26061e
i686	p11-kit-0.26.4-1.el9_8.i686.rpm	bda14fe3f0c812ce5829f24c58050a3bd60e47daca49c4222a14c6576577b605
i686	p11-kit-trust-0.26.4-1.el9_8.i686.rpm	ff0f36a806ca5b14208177eb0487d5b0a87bd168b805aa2007a8ced46ce4c3e1
ppc64le	p11-kit-trust-0.26.4-1.el9_8.ppc64le.rpm	3af35dd899b18b8a007ac2dc9333fdbd66dae8943b94902fa4fc4cacc5f71835
ppc64le	p11-kit-devel-0.26.4-1.el9_8.ppc64le.rpm	689a825bab1984275dad04afe81b8bcc69ac2de5342af32c05466561a13faa63
ppc64le	p11-kit-0.26.4-1.el9_8.ppc64le.rpm	7d0b0bdbcdd31aac7dcc688a78b85953f798c60c013fe5b95472956f8dcb045a
ppc64le	p11-kit-client-0.26.4-1.el9_8.ppc64le.rpm	7f18ae9b27ea2d16bc7ca554853022de83a6340424f916bbf279425322e6f086
ppc64le	p11-kit-server-0.26.4-1.el9_8.ppc64le.rpm	e324b9b63afd17b2f1aed615598d06d814b00c6cb59ab87cfe1a3da4c38c9add
s390x	p11-kit-client-0.26.4-1.el9_8.s390x.rpm	027cd66156a601dca8517d6e7a9b29758bdb0a4a914f0a69393ad17c1108d16a
s390x	p11-kit-trust-0.26.4-1.el9_8.s390x.rpm	02845179285c55a9a2e1da747622f0d6cae8715c56cb04eee153c4c7fbd2833a
s390x	p11-kit-devel-0.26.4-1.el9_8.s390x.rpm	60ad9199e6a12e2e542aa135503ee7cccfe71a8b209d2a9ef954b17d87ed4d3b
s390x	p11-kit-server-0.26.4-1.el9_8.s390x.rpm	994d00a38106d8c2af8fbf09cc32ef8d57655aaa4121f7d70950da2b11a73921
s390x	p11-kit-0.26.4-1.el9_8.s390x.rpm	b26aa74e6402ec01c939372e2439c96990d5faad00c1c4d966666f19ae1349ae
x86_64	p11-kit-devel-0.26.4-1.el9_8.x86_64.rpm	421f06bc2d5f573912e306cba728a8eb82060a2a40b5e039882401efc4467b17
x86_64	p11-kit-server-0.26.4-1.el9_8.x86_64.rpm	6afb5d1548b13b99643e0fa0ee51aba13cd463cb1cd66ffd8bf4383a20e0f3fb
x86_64	p11-kit-trust-0.26.4-1.el9_8.x86_64.rpm	7d5b5a1df2c5bf68eae627e3407ad6158129f8f3971e3abd7da8803511b1f21e
x86_64	p11-kit-client-0.26.4-1.el9_8.x86_64.rpm	8398349a1b46ce4705c1adaac43366eb236dfe126ab9bc69dd56fab443ef4dc1
x86_64	p11-kit-0.26.4-1.el9_8.x86_64.rpm	cfe434c3548de6d93181399d2bf24e4af6ad92c4948ba0d178262b026e4e84d0

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

Frequently Asked Questions

What does ALSA-2026:49667 fix?

1 CVEs in p11-kit, including the listed flaws (CVE-2026-13757).

Which release is covered?

AlmaLinux 9.

How do I apply it?

dnf update p11-kit — restart the service if it runs persistently.

References

Security Advisories

Related Advisories

Kernel Security Update — AlmaLinux 9 (ALSA-2026:93412)

2026-11-09

Fence-Agents Security Update — AlmaLinux 9 (ALSA-2026:94500)

2026-11-04

Cockpit Security Update — AlmaLinux 9 (ALSA-2026:94533)

2026-11-04

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System