[Git][security-tracker-team/security-tracker][master] CVE-2025-13151/libtasn1-6: upstream commit, advisory and possible follow-up

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2fd2ade4 by Sylvain Beucler at 2026-01-30T19:22:56+01:00
CVE-2025-13151/libtasn1-6: upstream commit, advisory and possible follow-up

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8651,8 +8651,11 @@ CVE-2025-13151 (Stack-based buffer overflow in libtasn1 version: v4.20.0. The fu
 	- libtasn1-6 4.21.0-2 (bug #1125063)
 	[trixie] - libtasn1-6 <no-dsa> (Minor issue)
 	[bookworm] - libtasn1-6 <no-dsa> (Minor issue)
-	[bullseye] - libtasn1-6 <postponed> (Minor issue; can be fixed in next update)
+	[bullseye] - libtasn1-6 <postponed> (Minor issue, unlikely scenario)
 	NOTE: https://gitlab.com/gnutls/libtasn1/-/merge_requests/121
+	NOTE: https://gitlab.com/gnutls/libtasn1/-/commit/d276cc495a2a32b182c3c39851f1ba58f2d9f9b8 (v4.21.0)
+	NOTE: Similar fix: https://gitlab.com/gnutls/libtasn1/-/commit/2f560e2b0ddca402f8b19d8a7cfd02871ea26927 (master)
+	NOTE: Advisory: https://gitlab.com/gnutls/libtasn1/-/commit/50b813ff48b2ec71e80c254064b4337ab68c6745 (master)
 CVE-2025-12776 (The Report Builder component of the application stores user input dire ...)
 	NOT-FOR-US: Commvault
 CVE-2025-12640 (The Folders \u2013 Unlimited Folders to Organize Media Library Folder, ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2fd2ade44f38a7457519d8f3fbb07a208ad70940

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2fd2ade44f38a7457519d8f3fbb07a208ad70940
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260130/6bf1dc48/attachment.htm>