[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DLA 3263-1] libtasn1-6 security update



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3263-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                           Chris Lamb
January 09, 2023                              https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : libtasn1-6
Version        : 4.13-3+deb10u1
CVE ID         : CVE-2021-46848

It was discovered that there was an off-by-one array size issue in
libtasn1-6, a library to manage the generic ASN.1 data structure.

For Debian 10 buster, this problem has been fixed in version
4.13-3+deb10u1.

We recommend that you upgrade your libtasn1-6 packages.

For the detailed security status of libtasn1-6 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libtasn1-6

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
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=N50H
-----END PGP SIGNATURE-----


Reply to: