Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Fedora 22 libtasn1 2015-5199 Critical Stack Overflow Fix

fedora
Calendar Grey April 21, 2015
Dist Fedora Esm H88
Fedora 22 users are urged to update the libtasn1 library to mitigate a critical stack overflow vulnerability affecting ASN.1 encoding processes
new upstream release (#1206968)

Summary

A library that provides Abstract Syntax Notation One (ASN.1, as specified

by the X.680 ITU-T recommendation) parsing and structures management, and

Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Update Information:

new upstream release (#1206968)

Change Log

References


[ 1 ] Bug #1207192 - CVE-2015-2806 libtasn1: stack overflow in asn1_der_decoding https://bugzilla.redhat.com/show_bug.cgi?id=1207192

Update Instructions

This update can be installed with the "yum" update program. Use su -c ''yum update libtasn1'' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libtasn1
Product: Fedora 22
Version: 4.4
Release: 1.fc22
URL:
Summary: The ASN.1 library used in GNUTLS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here