USN-7275-2: Libtasn1 vulnerability

USN-7275-2: Libtasn1 vulnerability
20 February 2025

Libtasn1 could be made to crash if it received specially crafted network traffic.

Releases
Ubuntu 24.04 LTS

Packages
libtasn1-6 - Library to manage ASN.1 structures

Details
USN-7275-1 fixed vulnerabilities in Libtasn1. This update provides the
corresponding updates for Ubuntu 24.04 LTS.

Original advisory details:

Bing Shi discovered that Libtasn1 inefficiently handled certificates. An
attacker could possibly use this issue to increase resource utilization
leading to a denial of service.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.04

• libtasn1-6 - 4.19.0-3ubuntu0.24.04.1
• libtasn1-bin - 4.19.0-3ubuntu0.24.04.1
  In general, a standard system update will make all the necessary changes.