Patching for libtasn1-6

Andreas Metzler ametzler at bebt.de
Sat Oct 29 06:21:38 BST 2022


On 2022-10-27 Scott Wisniewski via Pkg-gnutls-maint <pkg-gnutls-maint at alioth-lists.debian.net> wrote:
> Is there a plan to make libtasn1-6 14.19 available for bullseye in order to
> patch the following CVE:

> https://security-tracker.debian.org/tracker/CVE-2021-46848

> If so, do you have a rough ETA?

> If not, do you need help with contributions to get the updated version
> backported to bullseye?

Hello Scott,

thanks for the heads-up. I will doublecheck with debian-security whether
this is going to be fixed by DSA or a stable update, but assume it will
be the latter.

Stable updates happen about every 3 months with the last one in
September 2022.

cu Andreas



More information about the Pkg-gnutls-maint mailing list