Multiple buffer boundary check issues were discovered in libtasn1 library, causing it to read beyond the boundary of an allocated buffer. An untrusted ASN.1 input could cause an application using the library to crash. The libtasn1 library is used by the GnuTLS library to parse X.509 certificates. The gnutls packages in Red Hat Enterprise Linux 5 and earlier use bundled libtasn1, packages in Red Hat Enterprise Linux 6 and later depend on the library provided by a separate libtasn1 package. Upstream commits: http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=ff3b5c68cc32e30d19edbbc3a962b2266029f3cc http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=0e80d79db71747644394fe3472dad28cd3e7b00b http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=154909136c12cfa5c60732b7210827dfb1ec6aee http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=37a16434131c6ad8745b9accefec5cecb4cbb5b7 http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=cc10a8c5443c751d920cfaca1f104089e43296be http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=6fee6745b1bd1a82f16ae9b607855a3e3ab39fc6 http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=af0e8cd0bacf47ecce049165d3bc1ed9e861df1c http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=609d5c1366fb424f6150c4eed358d246e61cf204 http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=51612fca32dda445056ca9a7533bae258acd3ecb
Acknowledgment: Red Hat would like to thank GnuTLS upstream for reporting this issue.
Fixed upstream in libtasn1 3.6: http://lists.gnu.org/archive/html/help-libtasn1/2014-05/msg00006.html
Created libtasn1 tracking bugs for this issue: Affects: fedora-all [bug 1103087]
Created mingw-libtasn1 tracking bugs for this issue: Affects: fedora-all [bug 1103088]
Created mingw32-gnutls tracking bugs for this issue: Affects: epel-5 [bug 1103089]
This issue has been addressed in following products: Red Hat Enterprise Linux 6 Via RHSA-2014:0596 https://rhn.redhat.com/errata/RHSA-2014-0596.html
This issue has been addressed in following products: Red Hat Enterprise Linux 5 Via RHSA-2014:0594 https://rhn.redhat.com/errata/RHSA-2014-0594.html
libtasn1-3.6-1.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
libtasn1-3.6-1.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.
This issue has been addressed in following products: Red Hat Enterprise Linux 7 Via RHSA-2014:0687 https://rhn.redhat.com/errata/RHSA-2014-0687.html
This issue has been addressed in following products: RHEV-H and Agents for RHEL-6 Via RHSA-2014:0815 https://rhn.redhat.com/errata/RHSA-2014-0815.html