clevis vulnerabilities (Debian)

5 vulnerabilities.

• clevis Debian Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file CVE-2026-109968 Fix available 5.5 MediumOctober 14, 2026
• clevis Debian Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool CVE-2026-109971 Fix available 4.7 MediumOctober 14, 2026
• clevis Debian Clevis: clevis: pkcs#11 token pin written to world-readable file CVE-2026-109970 Fix available 4.7 MediumOctober 14, 2026
• clevis Debian Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask CVE-2026-109969 Fix available 4.7 MediumOctober 14, 2026
• clevis Debian Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection CVE-2026-109976 Fix available 4.7 MediumOctober 13, 2026