libtasn1-2.3-6.AXS4

エラータID: AXSA:2014-385:01

Release date: 
Tuesday, June 10, 2014 - 17:57
Subject: 
libtasn1-2.3-6.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

This is the ASN.1 library used in GNUTLS. More up to date information can be found at http://www.gnu.org/software/gnutls and http://www.gnutls.org

Security issues fixed with this release:

• CVE-2014-3467
Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnutTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 data.

• CVE-2014-3468
The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.

• CVE-2014-3469
The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue argument.

Solution: 

Update packages.

CVEs: 
CVE-2014-3467
Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.
CVE-2014-3468
The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.
CVE-2014-3469
The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue argument.




Additional Info: 

N/A

Download: 

SRPMS
  1. libtasn1-2.3-6.AXS4.src.rpm
    MD5: f097116b1765ed5d084845ca1a7940c8
    SHA-256: b7fd1d11cf637ec377597e820aa5cffa2994a216c2ddba8aa184580649aa8590
    Size: 1.43 MB

Asianux Server 4 for x86
  1. libtasn1-2.3-6.AXS4.i686.rpm
    MD5: bfeaf03b4f4441fd6b9178a32d69c0b1
    SHA-256: b848ef5ed267ded25ecda3ab32c7bbca87e8ca0c2e487c284afaf5ce8ab2c448
    Size: 238.90 kB
  2. libtasn1-devel-2.3-6.AXS4.i686.rpm
    MD5: bed1d6793c63974428bc4598116f379d
    SHA-256: b0c14022a0e24a641a486cedb30f7b6266d4711add79baeb63029d5ef04e0700
    Size: 60.06 kB

Asianux Server 4 for x86_64
  1. libtasn1-2.3-6.AXS4.x86_64.rpm
    MD5: bf228142d2af570e0a09593735ad26e2
    SHA-256: 7fc5345761072405abbb6cec48eaf52f1f0dcd17325a31d67e12b4e56b827848
    Size: 237.24 kB
  2. libtasn1-devel-2.3-6.AXS4.x86_64.rpm
    MD5: 1f97e8d102e6f2ecce4d99ec69194415
    SHA-256: 71f8ff570acd1487c57bf4d050c8696defea4f0b407cb5f3d97a945fdcb38f47
    Size: 59.65 kB
  3. libtasn1-2.3-6.AXS4.i686.rpm
    MD5: bfeaf03b4f4441fd6b9178a32d69c0b1
    SHA-256: b848ef5ed267ded25ecda3ab32c7bbca87e8ca0c2e487c284afaf5ce8ab2c448
    Size: 238.90 kB
  4. libtasn1-devel-2.3-6.AXS4.i686.rpm
    MD5: bed1d6793c63974428bc4598116f379d
    SHA-256: b0c14022a0e24a641a486cedb30f7b6266d4711add79baeb63029d5ef04e0700
    Size: 60.06 kB