Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 42: mingw-libtasn1 Update CVE-2025-13151 Denial of Service

fedora
Calendar Grey January 22, 2026
Dist Fedora Esm H88
MinGW libtasn1 updated for Fedora 42 to fix serious DoS exploit. Immediate action recommended to secure systems.
Update to 4.21.0, fixes CVE-2025-13151.

Summary

libtasn1 is the ASN.1 library used in GNUTLS.

This package contains the MinGW Windows cross compiled libtasn1 library.

Update Information:

Update to 4.21.0, fixes CVE-2025-13151.

Topics%20covered

Topics Covered

security advisory denial of service fedora buffer overflow mingw-libtasn1 cve-2025-13151

Change Log

* Tue Jan 13 2026 Sandro Mani - 4.21.0-1 - Update to 4.21.0 * Thu Jul 24 2025 Fedora Release Engineering - 4.20.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Wed Feb 12 2025 Sandro Mani - 4.20.0-1 - Update to 4.20.0

References


[ 1 ] Bug #2427834 - CVE-2025-13151 mingw-libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2427834 [ 2 ] Bug #2427836 - CVE-2025-13151 mingw-libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2427836

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-4ed69f3065' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mingw-libtasn1
Product: Fedora 42
Version: 4.21.0
Release: 1.fc42
URL: http://www.gnu.org/software/libtasn1/
Summary: MinGW Windows libtasn1 library

Topics%20covered

Topics Covered

security advisory denial of service fedora buffer overflow mingw-libtasn1 cve-2025-13151

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here