Bug#1095406: libtasn1-6: CVE-2024-12133

Andreas Metzler ametzler at bebt.de
Sun Feb 9 17:43:00 GMT 2025


On 2025-02-09 Salvatore Bonaccorso <carnil at debian.org> wrote:
> On Sat, Feb 08, 2025 at 03:42:47PM +0000, Moritz Mühlenhoff wrote:
> > On Sat, Feb 08, 2025 at 01:36:39PM +0100, Andreas Metzler wrote:
> > > On 2025-02-07 Salvatore Bonaccorso <carnil at debian.org> wrote:
> > > [...]
> > > > CVE-2024-12133[0]:
[...]
> Do we need as well the related gnutls28 fix?

I have not had time to check stable for CVE-2024-12243 (that is the
GnuTLS-part) but I would be quite surprised if it did not need patching.

cu Andreas

-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'



More information about the Pkg-gnutls-maint mailing list