[From nobody Sat Aug 15 09:31:05 2026
Received: (at submit) by bugs.debian.org; 10 Aug 2026 19:55:52 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-111.9 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,
 FROMDEVELOPER,GMAIL,PGPSIGNATURE,SPF_HELO_NONE,SPF_PASS,
 USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 11; hammy, 133; neutral, 25; spammy,
 0. spammytokens:
 hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
 0.000-+--H*RT:311, 0.000-+--H*RT:108
Return-path: <rouca@debian.org>
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:51530)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <rouca@debian.org>) id 1wtW6C-008cPU-1j
 for submit@bugs.debian.org; Mon, 10 Aug 2026 19:55:52 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; 
 s=smtpauto.stravinsky;
 h=X-Debian-User:Content-Type:MIME-Version:Message-ID:
 Date:Subject:To:From:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
 Content-Description:In-Reply-To:References;
 bh=4a+3CXT40gJATJ5FupTMxMKrgwXTtrH2Y31j89RULoM=; b=QXmhjETxdJlESQxCYIfBqq+2bF
 jyEDu6s1VmyVL4Boawzvz3g+ZUHn6O7UP4frRfwVIXHvNAYtS/MmiQwhRqJqhlYQoQq09yWTb0qL6
 L5ObWlMZVg0rgqthf2XBMNOUuOxRwtRbJD0FGmL6TBvPyIv1E1kvoLxZt3o9L9Zp6ua8TZzCjDgOj
 e7mvtwO2sInP0iQWE0T6ZO/yD99RwR3hcpG6jJdUK+sOCorScwvBy4MdH6Aih6QzOwbSMfD/EBYU+
 rJAEGPl1w9Je9vOvITxywas2TekEhDpVUOpv0L3Q7coGa3VTFwblZg825xo0lscLd5JEY3ARY74tJ
 HoO9n8eg==;
Received: from authenticated-user by stravinsky.debian.org with esmtpsa
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <rouca@debian.org>) id 1wtW6A-00328e-30;
 Mon, 10 Aug 2026 19:55:51 +0000
From: Bastien Roucaries <rouca@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: gnutls28: mismege of CVE-2025-13151
Date: Mon, 10 Aug 2026 21:55:46 +0200
Message-ID: <5694425.tWeucmBOSa@debian-ei>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="nextPart5321922.e8TTKsaY2g";
 micalg="pgp-sha512"; protocol="application/pgp-signature"
X-Debian-User: rouca
Delivered-To: submit@bugs.debian.org

--nextPart5321922.e8TTKsaY2g
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="utf-8"; protected-headers="v1"
From: Bastien Roucaries <rouca@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: gnutls28: mismege of CVE-2025-13151
Date: Mon, 10 Aug 2026 21:55:17 +0200
Message-ID: <5694425.tWeucmBOSa@debian-ei>
MIME-Version: 1.0

Source: gnutls28
Severity: serious
Tags: security
Justification: security
X-Debbugs-Cc: Debian Security Team <team@security.debian.org>
X-Debbugs-Cc:  Gajendra Nath Soren <gajendranath025@gmail.com>

CVE-2025-13151 (libtasn1 - off-by-one in asn1_expand_octet_string, fixed in
4.20.0)

 The fix changes:
   char name[2 * ASN1_MAX_NAME_SIZE + 1]

 to:
   char name[2 * ASN1_MAX_NAME_SIZE + 2]

 This applies to two functions: asn1_expand_any_defined_by and
 asn1_expand_octet_string.

gnutls28 vendor libtasn1 internally and show a partial fix -
asn1_expand_any_defined_by has been updated (+ 2 present) but

asn1_expand_octet_string still carries the vulnerable version (+ 1):
   - gnutls28 (lib/minitasn1/decoding.c)

     asn1_expand_any_defined_by: patched
     asn1_expand_octet_string: VULNERABLE

Thanks Gajendra Nath Soren

rouca


--nextPart5321922.e8TTKsaY2g
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----
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=R8zW
-----END PGP SIGNATURE-----

--nextPart5321922.e8TTKsaY2g--
]