Register | Log in

libtasn1-6

Manage ASN.1 structures (runtime)

Choose email to subscribe with

general

source: libtasn1-6 (main)
version: 4.13-3
maintainer: Debian GnuTLS Maintainers (archive) [DMD]
uploaders: Eric Dorland [DMD] – Andreas Metzler [DMD] – Simon Josefsson [DMD] – James Westby [DMD]
arch: all any
std-ver: 4.1.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-bpo: 4.2-2~bpo70+1
oldstable: 4.2-3+deb8u3
old-sec: 4.2-3+deb8u3
stable: 4.10-1.1+deb9u1
stable-sec: 4.10-1.1+deb9u1
testing: 4.13-3
unstable: 4.13-3

versioned links

4.2-2~bpo70+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.2-3+deb8u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.10-1.1+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.13-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libtasn1-6
libtasn1-6-dev
libtasn1-bin
libtasn1-doc

action needed

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2018-1000654: GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.

Please fix it.

Created: 2018-08-21 Last update: 2018-10-31 08:00

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2018-1000654: GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.

Please fix it.

Created: 2018-08-21 Last update: 2018-10-31 08:00

lintian reports 1 error and 4 warnings high

Lintian reports 1 error and 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2017-12-21 Last update: 2018-09-08 07:37

Multiarch hinter reports 1 issue(s) low

There are issues with the multiarch metadata for this package.

libtasn1-doc could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2018-12-12 04:50

2 ignored security issues in jessie low

There are 2 open security issues in jessie.

2 issues skipped by the security teams:

CVE-2017-10790: The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.
CVE-2018-1000654: GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.

Please fix them.

Created: 2017-07-02 Last update: 2018-10-31 08:00

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-1000654: GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.

Please fix it.

Created: 2018-08-21 Last update: 2018-10-31 08:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.2.1 instead of 4.1.3).

Created: 2018-04-16 Last update: 2018-08-26 08:16

news

[2018-05-21] libtasn1-6 4.13-3 MIGRATED to testing (Debian testing watch)
[2018-05-16] Accepted libtasn1-6 4.13-3 (source) into unstable (Andreas Metzler)
[2018-02-08] Accepted libtasn1-6 4.10-1.1+deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2018-01-31] libtasn1-6 4.13-2 MIGRATED to testing (Debian testing watch)
[2018-01-21] Accepted libtasn1-6 4.13-2 (source) into unstable (Andreas Metzler)
[2018-01-17] Accepted libtasn1-6 4.13-1 (source) into experimental (Andreas Metzler)
[2017-12-01] libtasn1-6 4.12-3 MIGRATED to testing (Debian testing watch)
[2017-11-25] Accepted libtasn1-6 4.12-3 (source) into unstable (Andreas Metzler)
[2017-08-01] libtasn1-6 4.12-2.1 MIGRATED to testing (Debian testing watch)
[2017-07-25] Accepted libtasn1-6 4.12-2.1 (source) into unstable (Salvatore Bonaccorso)
[2017-06-23] libtasn1-6 4.12-2 MIGRATED to testing (Debian testing watch)
[2017-06-18] Accepted libtasn1-6 4.12-2 (source) into unstable (Andreas Metzler)
[2017-05-31] libtasn1-6 4.10-1.1 MIGRATED to testing (Debian testing watch)
[2017-05-29] Accepted libtasn1-6 4.12-1 (source) into experimental (Andreas Metzler)
[2017-05-29] Accepted libtasn1-6 4.2-3+deb8u3 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Thorsten Alteholz)
[2017-05-28] Accepted libtasn1-6 4.10-1.1 (all source) into unstable (Salvatore Bonaccorso)
[2017-01-28] libtasn1-6 4.10-1 MIGRATED to testing (Debian testing watch)
[2017-01-17] Accepted libtasn1-6 4.10-1 (source) into unstable (Andreas Metzler)
[2017-01-14] Accepted libtasn1-6 4.9-5 (source) into unstable (Andreas Metzler)
[2016-08-19] libtasn1-6 4.9-4 MIGRATED to testing (Debian testing watch)
[2016-08-13] Accepted libtasn1-6 4.9-4 (source) into unstable (Andreas Metzler)
[2016-08-07] Accepted libtasn1-6 4.9-3 (source) into unstable (Andreas Metzler)
[2016-08-02] Accepted libtasn1-6 4.9-2 (source) into experimental (Andreas Metzler)
[2016-07-26] Accepted libtasn1-6 4.9-1 (source) into experimental (Andreas Metzler)
[2016-05-05] Accepted libtasn1-6 4.2-3+deb8u2 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2016-04-23] libtasn1-6 4.8-1 MIGRATED to testing (Debian testing watch)
[2016-04-17] Accepted libtasn1-6 4.8-1 (all source) into unstable (Andreas Metzler)
[2015-12-31] libtasn1-6 4.7-3 MIGRATED to testing (Debian testing watch)
[2015-12-25] Accepted libtasn1-6 4.7-3 (all source) into unstable (Andreas Metzler)
[2015-10-03] libtasn1-6 4.7-2 MIGRATED to testing (Britney)

1
2

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (1, 4)
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.13-3
3 bugs

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing