Ubuntu: 3309-1 Critical Security Risk in Libtasn1 Code Execution

ubuntu

June 5, 2017

Libtasn1 could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

Libtasn1 could be made to crash or run programs as your login if it opened

a specially crafted file.

Software Description:

- libtasn1-6: Library to manage ASN.1 structures

Details:

Jakub Jirasek discovered that GnuTLS incorrectly handled certain

assignments files. If a user were tricked into processing a specially

crafted assignments file, a remote attacker could possibly execute arbirary

code.

Topics Covered

security advisory code execution bug fix Ubuntu remote execution libtasn1

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  libtasn1-6                      4.10-1ubuntu0.1

Ubuntu 16.10:
  libtasn1-6                      4.9-4ubuntu0.1

Ubuntu 16.04 LTS:
  libtasn1-6                      4.7-3ubuntu0.16.04.2

Ubuntu 14.04 LTS:
  libtasn1-6                      3.4-3ubuntu0.5

In general, a standard system update will make all the necessary changes.