ALT Linux Team

Package libtasn1 update in sisyphus on 2025-02-15

ALT-PU-2025-2846-1

Package libtasn1 updated to version 4.20.0-alt1 for branch sisyphus in task 374932.

Closed vulnerabilities

Published: 2025-02-10
Modified: 2025-02-21

CVE-2024-12133

A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.

References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top