SUSE has issued an advisory on October 26: https://lists.suse.com/pipermail/sle-security-updates/2022-October/012715.html The issue is fixed upstream in 4.19.0. Mageia 8 is also affected.
Status comment: (none) => Fixed upstream in 4.19.0Whiteboard: (none) => MGA8TOO
Equivalent openSUSE advisory: https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UOQWW4AUK2TNVOVQ3OANN2IEBVJFBHJ4/
libtasn1-4.19.0-1.mga9 uploaded for Cauldron.
Whiteboard: MGA8TOO => (none)Version: Cauldron => 8
Thanks David, that should help. No particular packager in sight for this, so assigning globally. Note it is now M8 only.
Assignee: bugsquad => pkg-bugs
Ubuntu has issued an advisory for this on October 31: https://ubuntu.com/security/notices/USN-5707-1
Suggested advisory: ======================== The updated packages fix a security vulnerability: GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der. (CVE-2021-46848) References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46848 https://lists.suse.com/pipermail/sle-security-updates/2022-October/012715.html https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UOQWW4AUK2TNVOVQ3OANN2IEBVJFBHJ4/ https://ubuntu.com/security/notices/USN-5707-1 ======================== Updated packages in core/updates_testing: ======================== lib(64)tasn1_6-4.16.0-4.1.mga8 lib(64)tasn1-devel-4.16.0-4.1.mga8 libtasn1-tools-4.16.0-4.1.mga8 from SRPM: libtasn1-4.16.0-4.1.mga8.src.rpm
Assignee: pkg-bugs => qa-bugsStatus: NEW => ASSIGNEDCC: (none) => nicolas.salgueroCVE: (none) => CVE-2021-46848Status comment: Fixed upstream in 4.19.0 => (none)Source RPM: libtasn1-4.18.0-2.mga9.src.rpm => libtasn1-4.16.0-4.mga8.src.rpm
MGA8-64 MATE on Acer Aspire 5253 No installation issues. Ref bug 25744, I installed blender. i was able to open a new project, select 2D and draw some objects. Tried to follow a tutorial, but my lack of experience og graphical matters is blatant, and this laptop is underdimensioned, I checked with strace and can confirm libtasn was called upon. So OK with me.
CC: (none) => herman.viaeneWhiteboard: (none) => MGA8-64-OK
Validating. Advisory in Comment 5.
CC: (none) => andrewsfarm, sysadmin-bugsKeywords: (none) => validated_update
Keywords: (none) => advisoryCC: (none) => davidwhodgins
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2022-0414.html
Status: ASSIGNED => RESOLVEDResolution: (none) => FIXED