From 5fd8b2458690a865065ef97951a345f659477648 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Tue, 10 Feb 2026 08:01:27 +0100 Subject: [PATCH] package/libtasn1: security bump to version 4.21.0 Fixes the following security vulnerability: CVE-2025-13151: Stack-based buffer overflow in asn1_expand_octet_string function https://lists.gnu.org/archive/html/help-libtasn1/2026-01/msg00001.html Release notes: https://lists.gnu.org/archive/html/help-libtasn1/2026-01/msg00000.html Signed-off-by: Peter Korsgaard Signed-off-by: Julien Olivain --- package/libtasn1/libtasn1.hash | 4 ++-- package/libtasn1/libtasn1.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libtasn1/libtasn1.hash b/package/libtasn1/libtasn1.hash index b9c9dad131..f099b7bfd6 100644 --- a/package/libtasn1/libtasn1.hash +++ b/package/libtasn1/libtasn1.hash @@ -1,6 +1,6 @@ # Locally calculated after checking pgp signature -# https://ftp.gnu.org/gnu/libtasn1/libtasn1-4.20.0.tar.gz.sig -sha256 92e0e3bd4c02d4aeee76036b2ddd83f0c732ba4cda5cb71d583272b23587a76c libtasn1-4.20.0.tar.gz +# https://ftp.gnu.org/gnu/libtasn1/libtasn1-4.21.0.tar.gz.sig +sha256 1d8a444a223cc5464240777346e125de51d8e6abf0b8bac742ac84609167dc87 libtasn1-4.21.0.tar.gz # Locally calculated sha256 990ef6a87f29a9d3db33698b94ea026a5d0f81bbf9806333d73699a250b7e5d6 README.md sha256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986 COPYING diff --git a/package/libtasn1/libtasn1.mk b/package/libtasn1/libtasn1.mk index 3154e500f1..9a853e2312 100644 --- a/package/libtasn1/libtasn1.mk +++ b/package/libtasn1/libtasn1.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBTASN1_VERSION = 4.20.0 +LIBTASN1_VERSION = 4.21.0 LIBTASN1_SITE = $(BR2_GNU_MIRROR)/libtasn1 LIBTASN1_DEPENDENCIES = host-bison host-pkgconf LIBTASN1_LICENSE = GPL-3.0+ (tests, tools), LGPL-2.1+ (library)