libtasn1-6_4.20.0-2+deb13u1_source.changes ACCEPTED into proposed-updates->stable-new

[Adrian Bunk]

On Sat, Jun 20, 2026 at 03:47:48PM +0200, Andreas Metzler wrote:
> On 2026-06-17 Debian FTP Masters <ftpmaster at ftp-master.debian.org> wrote:
> > Thank you for your contribution to Debian.
> 
> > Mapping trixie to stable.
> > Mapping stable to proposed-updates.
> 
> > Accepted:
> 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA512
> 
> > Format: 1.8
> > Date: Wed, 17 Jun 2026 21:48:52 +0300
> > Source: libtasn1-6
> > Architecture: source
> > Version: 4.20.0-2+deb13u1
> > Distribution: trixie
> [...]
> >    * Non-maintainer upload.
> >    * CVE-2025-13151: Stack-based buffer overflow in asn1_expand_octet_string()
> >      (Closes: #1125063)
> [...]
> 
> Hello,
> 
> any idea where I can find the sources ATM? I thought I should be able to
> see them in trixie-proposed updates but they are not in the pool
> http://ftp.debian.org/debian/pool/main/libt/libtasn1-6/ ?

This is currently in stable-new, it needs manual approval from a stable 
release manager to go into trixie-proposed from there.

Options to obtain the sources are:
- manual debdiff in my pu request (you already saw that one)
- generated debdiff at [1]
- source package under coccia:/srv/ftp-master.debian.org/queue/p-u-new/tree/

> TIA, cu Andreas

cu
Adrian

[1] https://release.debian.org/proposed-updates/stable.html