Opened 9 months ago

Closed 9 months ago

Last modified 8 months ago

#22620 closed enhancement (fixed)

libtasn1-4.21.0

Reported by: Douglas R. Reno Owned by: zeckma
Priority: high Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New minor version 


# Noteworthy changes in release 4.21.0 (2026-01-08) [stable]
- Undocumented asn1Decoding --debug flag removed, thanks to Andrew Hamilton.
- Code coverage for src/ went from 35% to 82%, thanks to Andrew Hamilton.
- Fix of ASN.1 typo in manual, thanks to Masatake YAMATO.
- NEWS renamed to NEWS.md and uses markdown syntax.
- Update gnulib files and various build/maintenance fixes.
- Fix for vulnerability CVE-2025-13151 Stack-based buffer overflow

Change History (8)

comment:1 by Bruce Dubbs, 9 months ago

Owner: changed from blfs-book to Bruce Dubbs
Status: new → assigned

comment:2 by zeckma, 9 months ago

I'll handle the security advisory for this ticket.

comment:3 by Bruce Dubbs, 9 months ago

Fixed at commits 

c6fbfb3662 Update to poppler-26.01.0.
05ad7dbebc Update to curl-8.18.0 (Security Update).
e9ec3d89ff Update to libtasn1-4.21.0 (Security Update).
d939395a16 Update to libjpeg-turbo-3.1.3.

comment:4 by Bruce Dubbs, 9 months ago

Owner: changed from Bruce Dubbs to zeckma
Status: assigned → new

Leaving open for security advisory. Reassigning.

comment:5 by zeckma, 9 months ago

Status: new → assigned

comment:6 by zeckma, 9 months ago

Priority: elevated → high

CVE-2025-13151 is rated High.

comment:7 by zeckma, 9 months ago

Resolution: → fixed
Status: assigned → closed

SA-12.4-069 issued.

comment:8 by Bruce Dubbs, 8 months ago

Milestone: 12.5 → 13.0

Milestone renamed

Note: See TracTickets for help on using tickets.