Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Libtasn1 Security Update Affects Red Hat Systems

published 4 months ago

Summary

Libtasn1 is a library used by some Red Hat applications to verify digital certificates. If left unpatched, a malicious actor could exploit this vulnerability to intercept sensitive information or take control of affected systems. Update your Red Hat systems to the latest version of libtasn1 to ensure the security of your digital certificates.

What to do

Update redhat libtasn1 to version 0:4.20.0-5.el10_2.
Update redhat libtasn1-debuginfo to version 0:4.20.0-5.el10_2.
Update redhat libtasn1-debugsource to version 0:4.20.0-5.el10_2.
Update redhat libtasn1-devel to version 0:4.20.0-5.el10_2.
Update redhat libtasn1-tools to version 0:4.20.0-5.el10_2.
Update redhat libtasn1-tools-debuginfo to version 0:4.20.0-5.el10_2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:10.2	redhat	libtasn1	< 0:4.20.0-5.el10_2 Fix: upgrade to 0:4.20.0-5.el10_2
Red Hat:enterprise_linux:10.2	redhat	libtasn1-debuginfo	< 0:4.20.0-5.el10_2 Fix: upgrade to 0:4.20.0-5.el10_2
Red Hat:enterprise_linux:10.2	redhat	libtasn1-debugsource	< 0:4.20.0-5.el10_2 Fix: upgrade to 0:4.20.0-5.el10_2
Red Hat:enterprise_linux:10.2	redhat	libtasn1-devel	< 0:4.20.0-5.el10_2 Fix: upgrade to 0:4.20.0-5.el10_2
Red Hat:enterprise_linux:10.2	redhat	libtasn1-tools	< 0:4.20.0-5.el10_2 Fix: upgrade to 0:4.20.0-5.el10_2
Red Hat:enterprise_linux:10.2	redhat	libtasn1-tools-debuginfo	< 0:4.20.0-5.el10_2 Fix: upgrade to 0:4.20.0-5.el10_2

Original advisory text

Red Hat Security Advisory: libtasn1 security update

References

https://access.redhat.com/errata/RHSA-2026:28235 Vendor Advisory
https://access.redhat.com/security/updates/classification/#low Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2427698 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28235.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-13151 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-13151 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-13151 Vendor Advisory
https://gitlab.com/gnutls/libtasn1 Third Party Advisory
https://gitlab.com/gnutls/libtasn1/-/merge_requests/121 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.9 Medium

Timeline

Published24 Jun 2026

Updated24 Jun 2026

First seen24 Jun 2026

Sources

RHSA-2026:28235 · OSV

Track software like this

Free during beta