Amazon Linux 2023 Security Advisory: ALAS2023-2025-989
Advisory Released Date: 2025-06-02
Advisory Updated Date: 2025-06-02
Severity:
Medium
Issue Overview:
When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time to complete. This could be utilized for a remote DoS attack by presenting a crafted certificate to the network peer. (CVE-2024-12133)
Affected Packages:
libtasn1
Issue Correction:
Run dnf update libtasn1 --releasever 2023.7.20250527 to update your system.
New Packages:
aarch64:
libtasn1-debugsource-4.19.0-1.amzn2023.0.5.aarch64
libtasn1-debuginfo-4.19.0-1.amzn2023.0.5.aarch64
libtasn1-4.19.0-1.amzn2023.0.5.aarch64
libtasn1-tools-4.19.0-1.amzn2023.0.5.aarch64
libtasn1-tools-debuginfo-4.19.0-1.amzn2023.0.5.aarch64
libtasn1-devel-4.19.0-1.amzn2023.0.5.aarch64
src:
libtasn1-4.19.0-1.amzn2023.0.5.src
x86_64:
libtasn1-debugsource-4.19.0-1.amzn2023.0.5.x86_64
libtasn1-4.19.0-1.amzn2023.0.5.x86_64
libtasn1-tools-4.19.0-1.amzn2023.0.5.x86_64
libtasn1-debuginfo-4.19.0-1.amzn2023.0.5.x86_64
libtasn1-tools-debuginfo-4.19.0-1.amzn2023.0.5.x86_64
libtasn1-devel-4.19.0-1.amzn2023.0.5.x86_64