Most recent entries from all

ALSA-2026:28235 — Low: libtasn1 security update

2026-10-02T15:06:53.737294+00:00

Affected: AlmaLinux:10: libtasn1, AlmaLinux:10: libtasn1-devel, AlmaLinux:10: libtasn1-tools

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

* libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-05140

2026-10-02T15:06:53.737366+00:00

bdu:2026-05140

BELL-CVE-2025-13151

2026-10-02T15:06:53.737384+00:00

Affected: Alpaquita:25: libtasn1, Alpaquita:stream: libtasn1

certfr-2026-avi-0199 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq…

2026-10-02T15:06:53.737404+00:00

certfr-2026-avi-0199

Withdrawn: CLEANSTART-2026-AF52025 — In libexpat before 2

2026-10-02T15:06:53.737419+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-zookeeper

Multiple security vulnerabilities affect the apache-zookeeper package. In libexpat before 2. See references for individual vulnerability details.

EUVD-2026-266083

2026-10-02T15:06:53.737439+00:00

EUVD-2026-266083

fkie_cve-2025-13151

2026-10-02T15:06:53.737450+00:00

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

GHSA-f433-vfwr-65r3

2026-10-02T15:06:53.737470+00:00

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

msrc_CVE-2025-13151 — CVE-2025-13151

2026-10-02T15:06:53.737482+00:00

msrc_CVE-2025-13151

NCSC-2026-0309 — Kwetsbaarheden verholpen in Oracle Communications

2026-10-02T15:06:53.737497+00:00

NCSC-2026-0309

OESA-2026-1178 — libtasn1 security update

2026-10-02T15:06:53.737521+00:00

Affected: openEuler:24.03-LTS: libtasn1

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es):

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

openSUSE-SU-2026:10033-1 — libtasn1-6-32bit-4.21.0-1.1 on GA media

2026-10-02T15:06:53.737543+00:00

libtasn1-6-32bit-4.21.0-1.1 on GA media

RHSA-2026:33313 — Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

2026-10-02T15:06:53.737559+00:00

libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification libxslt: use-after-free with key data stored cross-RVT libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images. python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite nginx: ngx_http_rewrite_module: code execution and denial of service openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key libpng: libpng: Arbitrary code execution due to use-after-free vulnerability libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion vim: Command injection allows arbitrary code execution via malicious tag files urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

RLSA-2026:28235 — Low: libtasn1 security update

2026-10-02T15:06:53.737591+00:00

Affected: Rocky Linux:10: libtasn1

Security Fix(es):

* libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:0118-1 — Security update for libtasn1

2026-10-02T15:06:53.737613+00:00

Security update for libtasn1

UBUNTU-CVE-2025-13151

2026-10-02T15:06:53.737627+00:00

Affected: Ubuntu:Pro:14.04:LTS: libtasn1-6, Ubuntu:Pro:16.04:LTS: libtasn1-6, Ubuntu:Pro:18.04:LTS: libtasn1-6, Ubuntu:Pro:20.04:LTS: libtasn1-6, Ubuntu:22.04:LTS: libtasn1-6, Ubuntu:24.04:LTS: libtasn1-6, Ubuntu:25.10: libtasn1-6

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

WID-SEC-W-2026-0044 — libtasn1: Schwachstelle ermöglicht Denial of Service

2026-10-02T15:06:53.737654+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libtasn1 ausnutzen, um einen Denial of Service Angriff durchzuführen.