From libksba-1.8.0 vs libksba-1.8.1: @@ -1,3 +1,11 @@ +Noteworthy changes in version 1.8.1 (2026-08-24) [C24/A16/R1] +------------------------------------------------ + + * Fix CMS parser to avoid possible infinite loop. [T8361] + + Release-info: https://dev.gnupg.org/T8253
The fix is: commit 06720f9b16a172404f49089cbb6eb95e4344f562 Author: NIIBE Yutaka <[email protected]> AuthorDate: Thu Jul 30 14:18:27 2026 +0900 Commit: NIIBE Yutaka <[email protected]> CommitDate: Thu Jul 30 14:28:38 2026 +0900 Fix CMS parser to avoid possible infinite loop. * src/cms-parser.c (_ksba_cms_parse_signed_data_part_2): Finish when detecting no progress. (_ksba_cms_parse_enveloped_data_part_1): Likewise. -- Found by AISLE in partnership with Red Hat. Reported by: Jakub Jelen GnuPG-bug-id: 8361 Signed-off-by: NIIBE Yutaka <[email protected]> sam
signature.asc
Description: PGP signature
