this package is different. There are two asn1cs in the wild, and debian package is not of Objective Systems'.
-- Lev > On Jul 20, 2016, at 10:37, Loyall, David <david.loy...@nebraska.gov> wrote: > > Package: asn1c > > There is a security bug regarding ASN1C by Objective Systems Inc. > > However, I believe that Debian's ASN1C is a different implementation by Lev > Walkin. > > Please confirm that this package is not affected by CVE-2016-5080. > > Thanks, cheers, > --Dave > >