Package: libtasn1-2
Version: 0.2.17-1
Severity: grave
Tags: security

A crash in the DER decoder of GnuTLS has been disclosed.

From: Simon Josefsson <[EMAIL PROTECTED]>
Subject: GnuTLS 1.2.10 - Security release
Newsgroups: gnu.announce
To: [EMAIL PROTECTED], help-gnutls@gnu.org, info-gnu@gnu.org
Date: Thu, 09 Feb 2006 16:46:28 +0100
Message-ID: <[EMAIL PROTECTED]>

We are pleased to announce the availability of GnuTLS version 1.2.10,
a security bug-fix release on the stable 1.2.x branch.

This release fixes several serious bugs that would make the DER
decoder in libtasn1 crash on invalid input.  The problems were
reported by Evgeny Legerov on the 31th of January.

[...]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to