RLSA-2026:36728

Synopsis

Low: libtasn1 security update

Description

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

* libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2427698

CVEs

CVE-2025-13151

Affected packages

Rocky Linux 8 aarch64 - BaseOS

libtasn1-0:4.13-6.el8_10.aarch64.rpm libtasn1-0:4.13-6.el8_10.src.rpm libtasn1-debuginfo-0:4.13-6.el8_10.aarch64.rpm libtasn1-debugsource-0:4.13-6.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - BaseOS

libtasn1-0:4.13-6.el8_10.i686.rpm libtasn1-0:4.13-6.el8_10.src.rpm libtasn1-0:4.13-6.el8_10.x86_64.rpm libtasn1-debuginfo-0:4.13-6.el8_10.i686.rpm libtasn1-debuginfo-0:4.13-6.el8_10.x86_64.rpm libtasn1-debugsource-0:4.13-6.el8_10.i686.rpm libtasn1-debugsource-0:4.13-6.el8_10.x86_64.rpm

Rocky Linux 8 aarch64 - AppStream

libtasn1-devel-0:4.13-6.el8_10.aarch64.rpm libtasn1-tools-0:4.13-6.el8_10.aarch64.rpm libtasn1-tools-debuginfo-0:4.13-6.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

libtasn1-devel-0:4.13-6.el8_10.i686.rpm libtasn1-devel-0:4.13-6.el8_10.x86_64.rpm libtasn1-tools-0:4.13-6.el8_10.x86_64.rpm libtasn1-tools-debuginfo-0:4.13-6.el8_10.x86_64.rpm