Sync updates from Debian Buster Security
requested to merge proposed-updates/ritesh/buster-security.apertis/v2020-security into apertis/v2020-security
p11-kit (0.23.15-2+deb10u1) buster-security; urgency=high
- Non-maintainer upload by the Security Team.
- Fix bounds check in p11_rpc_buffer_get_byte_array (CVE-2020-29362)
- Check attribute length against buffer size (CVE-2020-29363)
- Check for arithmetic overflows before allocating (CVE-2020-29361)
- Follow-up to arithmetic overflow fix (CVE-2020-29361)