Sync from SUSE:SLFO:1.1 libtasn1 revision 91c13ec3912931dd9757ed842b277b13

libtasn1-4.19.0.tar.gz.sig

@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+
+iHUEABYIAB0WIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYwUS9wAKCRBRcisI/kdF
+ouWTAP95jlnitHZ2gCNZgtei9tEjdUVVL8CsFbQnvogFVUvieQD/XzHxaRGluLTh
+DuHAJzrPScJUtPGImSUsoqcgozUv4w8=
+=zX4n
+-----END PGP SIGNATURE-----

libtasn1-4.20.0.tar.gz.sig

@@ -1,22 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQNTBAAWCgL7FiEEo8ychwudMQq61M8vUXIrCP5HRaIFAmeksWHCHCYAmDMEXJLO
-tBYJKwYBBAHaRw8BAQdACIcrZIvhrxDBkK9fV+QlTmXxo2naObDuGtw58YaxlOu0
-JVNpbW9uIEpvc2Vmc3NvbiA8c2ltb25Aam9zZWZzc29uLm9yZz6IlgQTFggAPgIb
-AwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYhBLHSvRN1vst4TPT4xNc89jjFPAa+
-BQJl/YgIBQkLehFUAAoJENc89jjFPAa+CboA+wUa06RD5e5VTCxvSWtPS75Wq2qB
-eYGZnf0jvUMxa2n4AP4xkUeAPPnNuMsTm2fsFCDIGaEM2Yn6Vb2huzzT1Fw/BLgz
-BFySz4EWCSsGAQQB2kcPAQEHQOxTCIOaeXAxI2hIX4HK9bQTpNVei708oNr1Klm8
-qCGKiPUEGBYIACYCGwIWIQSx0r0Tdb7LeEz0+MTXPPY4xTwGvgUCZf2IKwUJC3oQ
-qgCBdiAEGRYIAB0WIQSjzJyHC50xCrrUzy9RcisI/kdFogUCXJLPgQAKCRBRcisI
-/kdFoqdMAQCgH45aseZgIrwKOvUOA9QfsmeE8GZHYNuFHmM9FEQS6AD6A4x5aYvo
-Y6lo98pgtw2HPDhmcCXFItjXCrV4A0GmJA4JENc89jjFPAa+GcYA/26YQY05bLtn
-XiIjTiAzrGQrRXxTHPA8Av7TDFHvIetWAP9sHSoU8OfTwmTiEnGwLlsV7QJclZg3
-YNz/Ypcp9TqQBrg4BFySz2oSCisGAQQBl1UBBQEBB0AxlRumDW6nZY7A+VCfek9V
-pEx6PJmdJyYPt3lNHMd6HAMBCAeIfgQYFggAJgIbDBYhBLHSvRN1vst4TPT4xNc8
-9jjFPAa+BQJl/YgwBQkLehDGAAoJENc89jjFPAa+phoA/jrDqIrl/55vUMBhIQv+
-TP635d2iCTEnyFmbUcP9+gh6APoDsXalVd2cOGxQtSC+TF8PkZMn1TLkJKAjVxr+
-xx40AgAKCRBRcisI/kdFok6DAP9PaJmARJKk05qvNQdGbfn2LGqiUQpifZtSktP/
-LSl/1AD/Sh1QtFKGUtS1+fMRDMwProNEGpwf1TvVuaol1TC9IQk=
-=Ghwk
------END PGP SIGNATURE-----

libtasn1-CVE-2024-12133.patch

@@ -0,0 +1,270 @@
+From 4082ca2220b5ba910b546afddf7780fc4a51f75a Mon Sep 17 00:00:00 2001
+From: Daiki Ueno <ueno@gnu.org>
+Date: Sat, 19 Oct 2024 02:47:04 +0900
+Subject: [PATCH] asn1_der_decoding2: optimize _asn1_find_up call with node
+ cache
+
+If we are parsing a sequence or set and the current node is a direct
+child of it, there is no need to traverse the list back to the
+leftmost one as we have a node cache.
+
+Signed-off-by: Daiki Ueno <ueno@gnu.org>
+Signed-off-by: Simon Josefsson <simon@josefsson.org>
+---
+ lib/decoding.c | 9 ++++++++-
+ 1 file changed, 8 insertions(+), 1 deletion(-)
+
+diff --git a/lib/decoding.c b/lib/decoding.c
+index d2f6dea..1e0fcb3 100644
+--- a/lib/decoding.c
++++ b/lib/decoding.c
+@@ -1570,7 +1570,14 @@ asn1_der_decoding2 (asn1_node *element, const void *ider, int *max_ider_len,
+ 	    move = UP;
+ 	}
+       if (move == UP)
+-	p = _asn1_find_up (p);
++	{
++	  /* If we are parsing a sequence or set and p is a direct
++	     child of it, no need to traverse the list back to the leftmost node. */
++	  if (tcache.tail == p)
++	    p = tcache.head;
++	  else
++	    p = _asn1_find_up (p);
++	}
+     }
+ 
+   _asn1_delete_not_used (*element);
+-- 
+GitLab
+
+
+From 869a97aa259dffa2620dabcad84e1c22545ffc3d Mon Sep 17 00:00:00 2001
+From: Daiki Ueno <ueno@gnu.org>
+Date: Fri, 8 Nov 2024 16:05:32 +0900
+Subject: [PATCH] asn1_find_node: optimize "?NUMBER" node lookup with indexing
+
+To avoid linear search of named nodes, this adds a array of child
+nodes to their parent nodes as a cache.
+
+Signed-off-by: Daiki Ueno <ueno@gnu.org>
+Signed-off-by: Simon Josefsson <simon@josefsson.org>
+---
+ lib/element.c    | 56 ++++++++++++++++++++++++++++++++++++++++++------
+ lib/element.h    | 10 +++++++++
+ lib/int.h        |  8 +++++++
+ lib/parser_aux.c | 10 +++++++++
+ lib/structure.c  | 13 +++++++++++
+ 5 files changed, 90 insertions(+), 7 deletions(-)
+
+diff --git a/lib/element.c b/lib/element.c
+index 850bef4a..528df418 100644
+--- a/lib/element.c
++++ b/lib/element.c
+@@ -33,6 +33,8 @@
+ #include "structure.h"
+ #include "c-ctype.h"
+ #include "element.h"
++#include <limits.h>
++#include "intprops.h"
+ 
+ void
+ _asn1_hierarchical_name (asn1_node_const node, char *name, int name_size)
+@@ -129,6 +131,41 @@ _asn1_convert_integer (const unsigned char *value, unsigned char *value_out,
+   return ASN1_SUCCESS;
+ }
+ 
++int
++_asn1_node_array_set (struct asn1_node_array_st *array, size_t position,
++		      asn1_node node)
++{
++  if (position >= array->size)
++    {
++      size_t new_size = position, i;
++      asn1_node *new_nodes;
++
++      if (INT_MULTIPLY_OVERFLOW (new_size, 2))
++	return ASN1_GENERIC_ERROR;
++      new_size *= 2;
++
++      if (INT_ADD_OVERFLOW (new_size, 1))
++	return ASN1_GENERIC_ERROR;
++      new_size += 1;
++
++      if (INT_MULTIPLY_OVERFLOW (new_size, sizeof (*new_nodes)))
++	return ASN1_GENERIC_ERROR;
++
++      new_nodes = realloc (array->nodes, new_size * sizeof (*new_nodes));
++      if (!new_nodes)
++	return ASN1_MEM_ALLOC_ERROR;
++
++      for (i = array->size; i < new_size; i++)
++	new_nodes[i] = NULL;
++
++      array->nodes = new_nodes;
++      array->size = new_size;
++    }
++
++  array->nodes[position] = node;
++  return ASN1_SUCCESS;
++}
++
+ /* Appends a new element into the sequence (or set) defined by this
+  * node. The new element will have a name of '?number', where number
+  * is a monotonically increased serial number.
+@@ -145,6 +182,7 @@ _asn1_append_sequence_set (asn1_node node, struct node_tail_cache_st *pcache)
+   asn1_node p, p2;
+   char temp[LTOSTR_MAX_SIZE + 1];
+   long n;
++  int result;
+ 
+   if (!node || !(node->down))
+     return ASN1_GENERIC_ERROR;
+@@ -177,17 +215,21 @@ _asn1_append_sequence_set (asn1_node node, struct node_tail_cache_st *pcache)
+       pcache->tail = p2;
+     }
+ 
+-  if (p->name[0] == 0)
+-    _asn1_str_cpy (temp, sizeof (temp), "?1");
+-  else
++  n = 0;
++  if (p->name[0] != 0)
+     {
+-      n = strtol (p->name + 1, NULL, 0);
+-      n++;
+-      temp[0] = '?';
+-      _asn1_ltostr (n, temp + 1);
++      n = strtol (p->name + 1, NULL, 10);
++      if (n <= 0 || n >= LONG_MAX - 1)
++	return ASN1_GENERIC_ERROR;
+     }
++  temp[0] = '?';
++  _asn1_ltostr (n + 1, temp + 1);
+   _asn1_set_name (p2, temp);
+   /*  p2->type |= CONST_OPTION; */
++  result = _asn1_node_array_set (&node->numbered_children, n, p2);
++  if (result != ASN1_SUCCESS)
++    return result;
++  p2->parent = node;
+ 
+   return ASN1_SUCCESS;
+ }
+diff --git a/lib/element.h b/lib/element.h
+index 732054e9..b84e3a27 100644
+--- a/lib/element.h
++++ b/lib/element.h
+@@ -38,4 +38,14 @@ int _asn1_convert_integer (const unsigned char *value,
+ void _asn1_hierarchical_name (asn1_node_const node, char *name,
+ 			      int name_size);
+ 
++static inline asn1_node_const
++_asn1_node_array_get (const struct asn1_node_array_st *array, size_t position)
++{
++  return position < array->size ? array->nodes[position] : NULL;
++}
++
++int
++_asn1_node_array_set (struct asn1_node_array_st *array, size_t position,
++		      asn1_node node);
++
+ #endif
+diff --git a/lib/int.h b/lib/int.h
+index 4f2d98d1..41b12b0b 100644
+--- a/lib/int.h
++++ b/lib/int.h
+@@ -31,6 +31,12 @@
+ 
+ # define ASN1_SMALL_VALUE_SIZE 16
+ 
++struct asn1_node_array_st
++{
++  asn1_node *nodes;
++  size_t size;
++};
++
+ /* This structure is also in libtasn1.h, but then contains less
+    fields.  You cannot make any modifications to these first fields
+    without breaking ABI.  */
+@@ -47,6 +53,8 @@ struct asn1_node_st
+   asn1_node left;		/* Pointer to the next list element */
+   /* private fields: */
+   unsigned char small_value[ASN1_SMALL_VALUE_SIZE];	/* For small values */
++  asn1_node parent;		/* Pointer to the parent node */
++  struct asn1_node_array_st numbered_children; /* Array of unnamed child nodes for caching */
+ 
+   /* values used during decoding/coding */
+   int tmp_ival;
+diff --git a/lib/parser_aux.c b/lib/parser_aux.c
+index 415905a0..4281cc97 100644
+--- a/lib/parser_aux.c
++++ b/lib/parser_aux.c
+@@ -126,6 +126,7 @@ asn1_find_node (asn1_node_const pointer, const char *name)
+   const char *n_start;
+   unsigned int nsize;
+   unsigned int nhash;
++  const struct asn1_node_array_st *numbered_children;
+ 
+   if (pointer == NULL)
+     return NULL;
+@@ -209,6 +210,7 @@ asn1_find_node (asn1_node_const pointer, const char *name)
+       if (p->down == NULL)
+ 	return NULL;
+ 
++      numbered_children = &p->numbered_children;
+       p = p->down;
+       if (p == NULL)
+ 	return NULL;
+@@ -222,6 +224,12 @@ asn1_find_node (asn1_node_const pointer, const char *name)
+ 	}
+       else
+ 	{			/* no "?LAST" */
++	  if (n[0] == '?' && c_isdigit (n[1]))
++	    {
++	      long position = strtol (n + 1, NULL, 10);
++	      if (position > 0 && position < LONG_MAX)
++		p = _asn1_node_array_get (numbered_children, position - 1);
++	    }
+ 	  while (p)
+ 	    {
+ 	      if (p->name_hash == nhash && !strcmp (p->name, n))
+@@ -509,6 +517,8 @@ _asn1_remove_node (asn1_node node, unsigned int flags)
+       if (node->value != node->small_value)
+ 	free (node->value);
+     }
++
++  free (node->numbered_children.nodes);
+   free (node);
+ }
+ 
+diff --git a/lib/structure.c b/lib/structure.c
+index 9c95b9e2..32692ad2 100644
+--- a/lib/structure.c
++++ b/lib/structure.c
+@@ -31,6 +31,9 @@
+ #include <structure.h>
+ #include "parser_aux.h"
+ #include <gstr.h>
++#include "c-ctype.h"
++#include "element.h"
++#include <limits.h>
+ 
+ 
+ extern char _asn1_identifierMissing[];
+@@ -391,6 +394,16 @@ asn1_delete_element (asn1_node structure, const char *element_name)
+   if (source_node == NULL)
+     return ASN1_ELEMENT_NOT_FOUND;
+ 
++  if (source_node->parent
++      && source_node->name[0] == '?'
++      && c_isdigit (source_node->name[1]))
++    {
++      long position = strtol (source_node->name + 1, NULL, 10);
++      if (position > 0 && position < LONG_MAX)
++	_asn1_node_array_set (&source_node->parent->numbered_children,
++			      position - 1, NULL);
++    }
++
+   p2 = source_node->right;
+   p3 = _asn1_find_left (source_node);
+   if (!p3)
+-- 
+GitLab

libtasn1-CVE-2025-13151.patch

@@ -0,0 +1,22 @@
+From d276cc495a2a32b182c3c39851f1ba58f2d9f9b8 Mon Sep 17 00:00:00 2001
+From: Vijay Sarvepalli <vssarvepalli@cert.org>
+Date: Mon, 22 Dec 2025 12:24:27 -0500
+Subject: [PATCH] Fix for CVE-2025-13151 Buffer overflow
+
+Signed-off-by: Simon Josefsson <simon@josefsson.org>
+---
+ lib/decoding.c | 2 +-
+
+Index: libtasn1-4.19.0/lib/decoding.c
+===================================================================
+--- libtasn1-4.19.0.orig/lib/decoding.c
++++ libtasn1-4.19.0/lib/decoding.c
+@@ -1983,7 +1983,7 @@ int
+ asn1_expand_octet_string (asn1_node_const definitions, asn1_node * element,
+ 			  const char *octetName, const char *objectName)
+ {
+-  char name[2 * ASN1_MAX_NAME_SIZE + 1], value[ASN1_MAX_NAME_SIZE];
++  char name[2 * ASN1_MAX_NAME_SIZE + 2], value[ASN1_MAX_NAME_SIZE];
+   int retCode = ASN1_SUCCESS, result;
+   int len, len2, len3;
+   asn1_node_const p2;

libtasn1.changes

@@ -1,12 +1,17 @@
 -------------------------------------------------------------------
-Thu Feb  6 20:31:51 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+Fri Jan  9 09:08:37 UTC 2026 - Pedro Monreal <pmonreal@suse.com>
 
-- libtasn1 4.20.0:
-  * Fix CVE-2024-12133: Potential DoS in handling of numerous
-    SEQUENCE OF or SET OF elements (boo#1236878)
-  * The release tarball is now reproducible
-  * Update gnulib files and various build/maintenance fixes.
-- update upstream signing key
+- Security fix: [bsc#1256341, CVE-2025-13151]
+  * Stack-based buffer overflow. The function asn1_expend_octet_string()
+    fails to validate the size of input data resulting in a buffer overflow.
+  * Add libtasn1-CVE-2025-13151.patch
+
+-------------------------------------------------------------------
+Mon Feb 10 10:42:27 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Security fix: [bsc#1236878, CVE-2024-12133]
+  * Potential DoS in handling of numerous SEQUENCE OF or SET OF elements
+  * Add libtasn1-CVE-2024-12133.patch
 
 -------------------------------------------------------------------
 Wed Aug 24 18:58:07 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>

libtasn1.keyring

@@ -1,9 +1,9 @@
-pub   ed25519 2019-03-20 [SC] [expires: 2025-04-26]
+pub   ed25519 2019-03-20 [SC] [expires: 2022-05-17]
       B1D2 BD13 75BE CB78 4CF4  F8C4 D73C F638 C53C 06BE
 uid           [ultimate] Simon Josefsson <simon@josefsson.org>
-sub   ed25519 2019-03-20 [A] [expires: 2025-04-26]
-sub   ed25519 2019-03-20 [S] [expires: 2025-04-26]
-sub   cv25519 2019-03-20 [E] [expires: 2025-04-26]
+sub   ed25519 2019-03-20 [A] [expires: 2022-05-17]
+sub   ed25519 2019-03-20 [S] [expires: 2022-05-17]
+sub   cv25519 2019-03-20 [E] [expires: 2022-05-17]
 
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 
@@ -12,117 +12,109 @@ mDMEXJLOtBYJKwYBBAHaRw8BAQdACIcrZIvhrxDBkK9fV+QlTmXxo2naObDuGtw5
 FggAPgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYhBLHSvRN1vst4TPT4xNc8
 9jjFPAa+BQJg98DrBQkF8HQ3AAoJENc89jjFPAa+vtEA/RnzsQTu8lewh7hvFj1K
 5B0xL/RZoDwx0dRKBDzmOAdcAP0XC37ym9MGa6+CPIdFvTL2jud94gQzdE0K9Clt
-AB9pB4iWBBMWCAA+AhsDBQsJCAcCBhUICQoLAgQWAgMBAh4BAheAFiEEsdK9E3W+
-y3hM9PjE1zz2OMU8Br4FAmI4nkwFCQbCk5gACgkQ1zz2OMU8Br45VAEAiW1NFJeF
-tvH1ZK3tE3Mzi7/XPBzgiGmqh7G7nDjbFCgA/3fsJHfvGghRPKgpK815eclJWRQ5
-5GIIia4QaQPc5msCiJYEExYIAD4CGwMFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AW
-IQSx0r0Tdb7LeEz0+MTXPPY4xTwGvgUCX+IpbAUJBI5luAAKCRDXPPY4xTwGvtCJ
-AP0RI2UsT4uZawdEdyUz8yp82/gFflvugIQTX3lJo3iohAD/bFqoYSG0czpfe0lb
-oSz47MF+9KSs+/nx6oGMuAMewgaIlgQTFggAPgIbAwULCQgHAgYVCAkKCwIEFgID
-AQIeAQIXgBYhBLHSvRN1vst4TPT4xNc89jjFPAa+BQJezg00BQkDekmAAAoJENc8
-9jjFPAa+7QMBAKyq5ZypvFOXgcwlNtQdf6F+SP9LnCNSreQRYo4RxSwAAQD7A+O5
-6xFPB1DIM74lpvaExNJFHbJXCIfFGifJycR0A4iWBBMWCAA+AhsDBQsJCAcCBhUI
-CQoLAgQWAgMBAh4BAheAFiEEsdK9E3W+y3hM9PjE1zz2OMU8Br4FAl2wR/oFCQI6
-PUYACgkQ1zz2OMU8Br6FEgEA7veg+Di9SEhfwG2qShdiKwVC9aZqp9gnLIIm6qLt
-fMYA/i0B5GsPglC7upw2a5qyTuSev7uaDLueBSV+mMq8cmAOiJYEExYIAD4WIQSx
-0r0Tdb7LeEz0+MTXPPY4xTwGvgUCXJLOtAIbAwUJARzEAAULCQgHAgYVCAkKCwIE
-FgIDAQIeAQIXgAAKCRDXPPY4xTwGvpqwAQDPG0khoyBLa4gASbXlKAPxgFiflZy6
-EeOJHOUJkMYSrAEAjXUcy1wrw72CADiG5UUXrbBnRSNM3VwPxMvzQNAfcgCIlgQT
-FggAPgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYhBLHSvRN1vst4TPT4xNc8
-9jjFPAa+BQJl/YgIBQkLehFUAAoJENc89jjFPAa+CboA+wUa06RD5e5VTCxvSWtP
-S75Wq2qBeYGZnf0jvUMxa2n4AP4xkUeAPPnNuMsTm2fsFCDIGaEM2Yn6Vb2huzzT
-1Fw/BIkCMwQTAQgAHRYhBGIKpCKxLR4dtfM8MhkOX2s/V8OEBQJfe3IZAAoJEBkO
-X2s/V8OEKqQQAJF6FgI/FLj3IVbhA7ecvLOmnnaW7Xv/0bO2j6zSrke+8K01dXLU
-KMfeTDpPbIXZXX8XxgBMSHO8zXRn5pkC4S9ljCUucJ8f1ENFsA6kysA+VYQpzPvb
-uzo790PEaTt4wU+SaOLc/A6tkTcr2VAg7YLJqPP6P7XF0T8NFmh9NLAjiMtq6lOo
-33n5w7LjXC4A1vLjBzrDoUb8/6gimlBAHinWzulXmF88B01UtruYsBYLkAG4agkq
-SEqApec/UyxQTKQ/TL7VaQM7MOPUzDCJuPdn0qsFkEzFS4feJodF+frhqx2h89d7
-47MT2TdGvCbRPOdSzC780iIggMuBL0C6VhEB2ZuqsRBxmirB9QtJv/+K5vtjBdJq
-3yQ1F0cgPiKgIfEx1KhI5ObMeuOf5TTC0kBCkV8efg6hY+4Fda6ETTbDV5vzLrIw
-+4tx1AtAZBbJ/kLOYP06SKgzmIhB1cH/FbGynvA9vsqGnMX8myB0wiJultYuWpDc
-LAMC0+ihxqwQ+LrXUthzqnw/gHR0TGFGs+7UIdHLoxeIAU7xtoC60mhNS87NwykT
-NIDqr1FIT6jWS2MXrTFDdNB3sTcdbYqXZnGzG/UHv9TLocLgl7Z3IQ7gVAcbwnuE
-Ua9Wa+2z4d/q8jaKyTnxUwMu+WTnrBOVY2ANsNYzu7ofxpV0oF6FnkQOiQIzBBAB
-CgAdFiEEdjYv07yrl3cqbcFawY7miuGQ0LwFAl99p/MACgkQwY7miuGQ0Lwt5Q//
-SXbXwxklV8op8H25TVifN+vFCJl5QU6npi91VfZTjZnkE5JRIVL69Mor2cMHCyL3
-HfRJCleubJ6lE9JLp71Tjk5QhwNTvK4a2e4uG8R1VtTO8kLaRLMHQRPJ0e3BuToz
-dGuTzqYGiWzeT6tif8twqjCL78/EVtRsdlAGsQl22kvDfjlbR4xvaEfft6l9HeYW
-ORZqfMbO4oJY5Qgn/yhohTF3DCu4l62Se6lvfhxZSy8jC/2hHwcZbbrNNjFiaPzn
-KEH3Sbf+rkjnNFe+06ZI/21kNpRluufeZzMGvj9BJFC+bpRbEXh/AeA+oZA46lTX
-SJjmnu7CYXdgaQiKjH4mVRpAiN+e3fetciu9meUWQX+5TNFikeFEB2geIf87QNRP
-t/DbftHC0qjF6m85lMlfypq3PKIeSWKqOah7OdP9KROH1O4MNlEx6AmMDpeNuW0v
-4HYMsTNsCPu48e1DYnXqBi2XWvPDBt0jyh8rIOK0n6pmHSutD7tCuIzOkaZb2h0G
-CIf9ix1ekXPC4Vzax/AZrUXEQwokZL3VezYVlcVoVQnSfALZKiUljLznmLSOWeG/
-qDgkCuKFdFpULfv19tmbCnzQ+4/VaJ9YHlts6QyQ2y6ImdUZbH+SLotELgtrsmgJ
-Nfi2sbYmRIfJuLcVO95p8xlIYFTcizM9sKL26ogoY72JAgcEEAEKAB0WIQSaqb2x
-G7G5miEoWjMGZKdpVCZejAUCYK013wAKCRAGZKdpVCZejNPgDp0XIgGFU0rlJiZs
-geENOsCJm1eb5FQzT4/yXPKpTYJ/fh3IE2v2upi4yboaeR2SS2LVR9guG6z4Jyxj
-Tx1W3mH+r/YLcG+N6+h7wG4L6hgYNZwRy/7muG+FhUQrNMKIpcfY/QsrFcdvbFfo
-UntRB/aXFPJukny4ftBqG2LhqT0q737wPPC0Xqnr/4FYqhD0PdXZuEZQwb2PdQdn
-0i1bA+3jG96WqOwmp3IOMntAaraYMz/tvBoJ0+6HeGC/5F1HevnNRHyqjaZQQXdm
-uvRds9492u7TrTcOsto5XUbiRKAN/4b9W1vKTKqCy8ZFXjytyEMa787Je7nuqkqx
-jYIsN0Ck6rO1u8oqP5BIjjfeBNkh75BFSjV3wQwx8+tdw9OXeDpaRFcwO2H3zbwi
-2RwMOqzZkoqt/vNhu8T6X4Y8u7GmXvroHpA8/XHG1ZvsQ1bqjNitpoLcENUBwVLb
-2Gy9+rEzBwVppgJNDJW37Q/UxSdXmhNk5+Ls8v958cGDmustXnqR43JhFIuUQaim
-yI1/qrHudKJ1hNwB8I8bJeDD2emknfOPaqk56iEOy/CKo4UEWPqVhLPmynO2iwDK
-T7kD0f+q3fTiA88Khh0nFLJSOz/maq+EQ3aJAjMEEAEKAB0WIQSPiDgd1chz5K5I
-faUZm/EkNjIEagUCYzv9hgAKCRAZm/EkNjIEagdXEACP4qlQiBSNf4CAk0xeEyxa
-ez7s8aI48STFpyR2D1ePwgP17Vdwx8TOUpBMvTl7CoPnep1kUGVRehLfOhP4vxGm
-MNKeVhbWQJ3Z1cBQ5gEUUG8Ojti7CEr3ObbWsZIdOjFc8k9UwrWqgvRKGGpm8c/Q
-SxIe2+CEOYvcPF5d+YIeOPRFwbG7Oyrv4eqcGcg+QNcn2RicmhNsOoSuEV6IpXYM
-dZ5jbc5dMzG2IRGw8zB0Top7PCJqheFi2lkYgGkOZRqLILZvp9KygUXjuM1jA48x
-WLtnSyfyt/OL4cR2iJ0DbLAq3V82KGJoP/UEiamqRR/vLo/osKvRxOrMfoDV/FX7
-8lhC6DArQH96Lg1595dhOGumI4F/RUWoK9e5vF95KlKQhYfzah0kEUkWQpqMABfA
-D0xeMCQOKsJcdJ2qqOgyEdED3OVnU4qAd3x29INd3Vxxl6XpvuRPOz88FvkcRAAq
-wuy3DdLJyhO7bgHk5FYPxdL3BFz3915dhLO0KkvAKIOrC0vEw0Rh4CZKAJYyBEHl
-Rnk0J38/FmfGiLJmEeOnH3Cl9liubhBZ8ETduBCfkzI02gsEse1I60iatwXlUD3d
-JYUWfvABZ4pHuzlPIjZXSsewNWwFR0cXrQNwBL3kZLH6doJLGVZWnquDQSy7cK+a
-YHXus02Ov3r1Uv93TZPdZokCMwQQAQgAHRYhBEYiJcO0bzSHn8hJbNYFhI7X5phx
-BQJjTlZyAAoJENYFhI7X5phxTUYP/0rZ3/AFPJ9YsmU6ZOzLG7L7DqEYslhX8KCl
-bpEwUEQzatnODG9nPNO5heZhP1EjF/w8i60tR61HiBeP1ZDwaYZviPq6HidTcU30
-erpMhB95nWffBhgV0frAO4feWCWFmQFXYR3Gh/vy56G77IAODyGoR/rUSWdWRd26
-PsZmneqVKv/Xr5cbzXfFnm5lYhRtCropoVLLfKtgS+8+oy8uOMwewVKgL2CpMJES
-aGnEZPLiHFyw6Y0DffUhx2inY0TWViDk1zpERrETrIR/eXC9eBNbqiiER2O0j2DL
-kPgQS25kFdRY6h6ggkOyAAzELIS2cT1ACuC+VIEpmGjyJhpESA0EKzsLVo0vD9Wp
-swY4Y3gd6JNo7AY19/APmBaWHgZXD3bqb/7nf5HVkZYMZS+ejuPqjebM6/XXoXzO
-go3KlS8AaFhlZvLjShEbRmb19275NFokxwItVaop7Dcp9IYhbjtwXDawZFt0ljdN
-C/VviZCSuDlfvfaTjoNQqFAwtGWsre889SoJh1hX/0enf7TdZHKl91LUD650EQC7
-QxdlemjrToF0KbeDUHwUZLzZciVv0LW3EkzNYdhFvZWhu58+fS3tDj6+1qj2TF8X
-TF54ZnE7J+JipfRkXNpradDm5XKSaX7VpgeMJj3a1j56IIb8AgKrqNHmXDtsvxmY
-t1pap76CiQIzBBABCAAdFiEErkjA9ZsZmKBikqaZlr1P9k5wn94FAmQQJKwACgkQ
-lr1P9k5wn94r9A/+IhoY0u453w8edPPFZpujpce+xZ9jdYZZ5vTJmJOjNbS8ELW9
-z2FEkFCBIrSeEz+2NPV2jvSelbMoTELUFIs4dCSLTNtJb8Vl2YMRiFh8WtJDRCc7
-qifGDt+QTknQBUOoFVYolwogcHXMx+veE0cEktxhlG8pIRs4rRV0dlJmvquQ7F2p
-wsq+d614Z9fzsUHKzJzm9Zz7ScYGHXz5Nw7DMwM1qp0nNzTbArbx3u9s7AvYBXbE
-thJZefCpRxYBroYJzCGR6ZlWgydd9onwRgTpB3W09a/0FbL9Xsr1ZBbbLArWQx6w
-L6NQ3f/wHK3En58iCu41UeZeHmFVYklcDe4L1K/ZOC9b8mEy5DGlme3efnJLyWUi
-VWiKjYNn6KF5At2Lctnd08VvSGRxY3QpLpY5VcDjNTEVSFeqIGnRmJX37esUFYf9
-K6XCcQeStf78jK9RyF9dZ/JDBKCxRLohNWel2saOJd5AFmzA+rib0RJDbxxnN+M6
-J/bW65tsWagfLKJMq2VWGpTF/MGAxr5YolxXD6eVD2ngcoh0yauk7Cj1c2Xz22+0
-irhuDDS+PK9rs2I272BBvgPnYtrSS0MJ0QTXK7TUpgwxc2CEzLdj94knzRPZfr3S
-GA/VYeRrDCApFYkVjmrgvQOLcuQFQV3JXfvnZsAOaI9yZ77k6tRa55OyWM+IlgQT
-FggAPgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYhBLHSvRN1vst4TPT4xNc8
-9jjFPAa+BQJk8nONBQkJfGjZAAoJENc89jjFPAa+698A/ifBlgu1rdSn4koQ6E8E
-z1XhfZqZMAzbNW8DoQ2BVSVtAP9bTdYttIE1j5pK89u0+JMxcmvh8H3P3ntMrEWp
-2ePzBYh1BBAWCAAdFiEETRQFBlOkAtc2hwSdJATJVG4UU2AFAma2uakACgkQJATJ
-VG4UU2DpzQEAtGkZNbKAsd6UyPANoVoj/vz+hfMNOyQ0AQx4VrKfz/YA/A0qexJ4
-s2jc+Ew0/8AifWgwK0duMyKC4SuFsRAOtVYJiJYEExYIAD4CGwMFCwkIBwIGFQgJ
-CgsCBBYCAwECHgECF4AWIQSx0r0Tdb7LeEz0+MTXPPY4xTwGvgUCYzxUhgUJCHby
-0gAKCRDXPPY4xTwGvtUgAQCd8YrRkfJmSAaOkGrCzt2ilyCbGcQRyxQUoF3BhH6O
-owEAtesKlEoE43OeFp7RISnLsb4xKnsmZc0pJYGjfMjPFw24MwRcks91FgkrBgEE
-AdpHDwEBB0C8whXBx6ys1Ujww2q2T2Kp/PR+Uz2scHDkYEYPuA2oBIh+BBgWCAAm
-AhsgFiEEsdK9E3W+y3hM9PjE1zz2OMU8Br4FAmX9iCQFCQt6EK8ACgkQ1zz2OMU8
-Br6MQgEAnv4jEGbx2ZkkHn+UZy9RzlstNzh7bGcoRi50I7Mez4QBANztitHTWz1t
-omTHJ/TFwDnZn3985Hza1hFpGUf8eV4MuDMEXJLPgRYJKwYBBAHaRw8BAQdA7FMI
-g5p5cDEjaEhfgcr1tBOk1V6LvTyg2vUqWbyoIYqI9QQYFggAJgIbAhYhBLHSvRN1
-vst4TPT4xNc89jjFPAa+BQJl/YgrBQkLehCqAIF2IAQZFggAHRYhBKPMnIcLnTEK
-utTPL1FyKwj+R0WiBQJcks+BAAoJEFFyKwj+R0Wip0wBAKAfjlqx5mAivAo69Q4D
-1B+yZ4TwZkdg24UeYz0URBLoAPoDjHlpi+hjqWj3ymC3DYc8OGZwJcUi2NcKtXgD
-QaYkDgkQ1zz2OMU8Br4ZxgD/bphBjTlsu2deIiNOIDOsZCtFfFMc8DwC/tMMUe8h
-61YA/2wdKhTw59PCZOIScbAuWxXtAlyVmDdg3P9ilyn1OpAGuDgEXJLPahIKKwYB
-BAGXVQEFAQEHQDGVG6YNbqdljsD5UJ96T1WkTHo8mZ0nJg+3eU0cx3ocAwEIB4h+
-BBgWCAAmAhsMFiEEsdK9E3W+y3hM9PjE1zz2OMU8Br4FAmX9iDAFCQt6EMYACgkQ
-1zz2OMU8Br6mGgD+OsOoiuX/nm9QwGEhC/5M/rfl3aIJMSfIWZtRw/36CHoA+gOx
-dqVV3Zw4bFC1IL5MXw+RkyfVMuQkoCNXGv7HHjQC
-=L0YA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=
+=a/4L
+-----END PGP PUBLIC KEY BLOCK-----
+pub   rsa3744 2014-06-22 [SC] [expires: 2022-05-17]
+      9AA9 BDB1 1BB1 B99A 2128  5A33 0664 A769 5426 5E8C
+uid           [ultimate] Simon Josefsson <simon@josefsson.org>
+sub   rsa2048 2014-06-22 [S] [expires: 2022-05-17]
+sub   rsa2048 2014-06-22 [E] [expires: 2022-05-17]
+sub   rsa2048 2014-06-22 [A] [expires: 2022-05-17]
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQHhBFOnKoEBDqCoGZ7KIeZI1cbNFHIVxywetihLsA24nv3bJa/kd7kgkjfxdlcl
+JNlJZPbQIttl4HE7M+mxPUVtvlJeIggI2xd6uyv/XrM9Wdy48hskNHX5umZ55yIP
+C+T1VYXIJYhFFJgTaahtfCrf6/gQKnC0TNhYiWw4GP33S1UgVTz5IBEr85W/QmN/
+iUtM75wyq12ntRR+LSxSEmnEF5pzoP5SgVUXdAZAJQVvLcu8L9opAdHj4C3IcvvS
+HKvp4h2zvnOwRwjjiObKxRTtNaxHO8Sfofxw5aiifL39bxAKuJl6Rrhd09xKIvqb
+qu/m8GqWiSyO6N8tTDgxBKGfgba3D1AQ+J+VkFj31Obm3R3GEpFRo1i1mQLgKqbq
+Gs0aoZqVMkP3fItzkw+pOuldgL4P94IoXJsWjt0x7F0ojX0CWYbQ9rYHrBCe01Mn
+Rgn6j8glZj6hQs7sSMW5eGA0HNew6g0WEYGC2IsDQV2rGpsLnbx7r9P/qIA+q42o
+VjxxNMaa6WXfQf6eBiOSYa/9HsophhdK4+eJOoD/n85Vb4qvT0yEjQQurfBnbGte
+bIsakyX+eLpfwD6RpDAe7irZaBSOBKWdKOlbCdIezblK8JuSJS/LLMAfPVsasgMA
+EQEAAbQlU2ltb24gSm9zZWZzc29uIDxzaW1vbkBqb3NlZnNzb24ub3JnPokCKAQT
+AQoAPgIbAwgLCQgHDQwLCgUVCgkICwIeAQIXgAIZARYhBJqpvbEbsbmaIShaMwZk
+p2lUJl6MBQJg98BYBQkO3BfXAAoJEAZkp2lUJl6MvOAOnjLtGVPsmM1RgitDvSGd
+nzB2m6/rIxgfOMwbV4TZnVTspFV+rsjuQR5rtZvzkRG3ux7eoUpaexGNTzlO1SR/
+I9GVR4/eE5d7NuGXnEHINV3ecEeCYpY0PLivrOHIxkLl8/eMjpWs7qttu6+rNJBg
+YxiDnGryjbh5nhh/4fRp/IclNIMUIr+YMrsW4BIVM3xG1/2w/2nGFiic8l1LghIe
+ne2CXgM41RmQLQk88cAcGInZWDt1wwdz4maoeg89B59bzQawktT0ttWI4pvbGEoX
+qOUw+FU461noFt3u1AXAPS+KzWIhP2sIRCSOtjkKuL0sfPLTWJ88Wfj8KLVCq+wX
+Tjf7L85cFkX+FjcpUcU11bD98zCzMfU7s/IQM4ntwGGkBCGZtX5+UlfnJYzgGDTX
+hl4/XUUHcCNALbRFV51cZKR8v/Vu/MyVFxbhqKEXq07+NY6Elmj3nwh0Sc+K6Scr
+u5HWEcM9aPIwYf77ejDnDqZ7ATr7AxxOQGWQowyQLBvLSGtyat195mFBnL7qUJSR
+r9lp9Q9Q/K0DHbAEpRQTwQ7pbO7Y/ZnxCAb1WbgOpai2pohE87HOyBrg0vkIiBSS
+IsH7GlBtcqZhCJ/UesxhuRWo2+yzn7kBDQRTpywoAQgAuXfb7fU/BvEJYrdGt6z7
+5045hHILkH4r09D920I7jUbj28+7fCAG9Xqb57spkUjQ0tCFCNbIfcL1KXOiDQ2u
+bRPqeENO1MpWhgw9s2ld7RQyQna8gS2pHfTNGEg+5em+x1StCAmcSEOUp1cITB7+
+0FjBK8kLkF1tb/PX6dJz8Z7e62BZZCZ4/W+zxxQBqYp08XNr4pnVEy39qb6mYO7E
+ofhNfsD1PN8mGj0Qp8jIVhwWazH7bKM8O5I5bM2Av4UvCw4cYNN8ajQWLItzHVyp
+BZFxm920sQxGw6vDO3xFXIBEeedhZa2MGj+dYMZDWACIedG/ebkAS6LIN54jVdcI
+UwARAQABiQMvBBgBCgAmAhsCFiEEmqm9sRuxuZohKFozBmSnaVQmXowFAmD3wHoF
+CQ7cFlIBKcBdIAQZAQoABgUCU6csKAAKCRCGC3+7MvgRnZbbB/9OnkUj3x1OYZ7U
+X3DxwJFqRWtkW80qJ37Y51YnF2LnF3Atdrbb6zaz4UCvhxlnYZnXoir4UJL43qa4
+swd27KfSKoFH87wbFiCQTaQrvGN6xnrz/ac6aeSGZ7nhWOhxPANe7qrxNvprDRxV
+nOXO9fiAJv0v4Z7GEGO3JKHyTEfTNd+mi9LvDWkb3yPW5yh6ftEFdzv1o29BxcIz
+BgzvK5c6IiCTx71W548/xIcY9m3IaWgQV4dR25wR/Y95I5K57F5LKwSbT2ZWDkwo
+DLgKMK+ypwftIwEmOQlFzuveSWSV07CCXBn+/S35Lv5GozfMkYJW+7raCNL+Wyc3
+JpYRjhrECRAGZKdpVCZejHsiDpwLSoSGRSfr2KbcpTb4OBh78igWoog39piTnpCx
+JAZwdYn0VhNio+4T8GE4GjDS+z+c5yNpvJym7R/MfQNSSG+6G12DYI9jt3plpFMp
+OUNCPtB+3Sa/TWbSUUtx/1M7KQ1nzd9Ud8dguZMo9AbEJ9eVPY97cw/KgVofBR/9
+W/o+uCauW5Av41Pfvw6kVR+23ep1Tf2Fv1ELTfneP0RyMFE+g7emiCM47PQiqSk7
+5s2mrEuzaDLZ07QVOrGQcODTFoj+6pwCyj2wnRxRYLjr60GdMiZVU94QF96Fdwt9
+Cagu91ChXNprEtIwUl3P9B/GRQ9AB0ij8V8t0TWsMOIY9TAQYAOG+3y/FM0GRpVN
+0WBAIcw6VTz8ybjfwR3TfbiDwHfkXRNYsmrZk6JboVkRsa4sne5nGNrjo9iFU/wF
+PAUFvixUYrz7oHxKDltuRqmhSc0N2XDPENpvBVnBrvQWw5326JkAdebPoPu5YvXY
++qZod6r98NdMaCGrnvi7pmDxruI82zSwrf4WHlkjB9lghYJ0pToiXbPbYrnGUhJ6
+e6FfeU6VY05MaqNf80NC0BnVMp5JeRUiBPNpnxQUbaAt4a3zcIuzfxffym6qTNVQ
++V1wREUJIMW5AQ0EU6csOAEIANSQ8a36jYicdSY0uq3WJUOeaIoatrI6a/wOmzMd
+A9hGb/DX59LLG+EUiwgENEQMValvoK0n3dJ4s4ZdVnL/F8OU8gvTA9hoSI074PuT
+Zoyd+f01+UoGho3z3aAUALOFVoopaWu/svP6ZcdakA76I31WcV9Ws7Zg8iQUBUax
+LpUHB/GiWNObxP+joqslOhqctU94YR723TppWUxOpE+r7C/1K/3Zd2TBPhDuCgWl
+xaaizyJx3vxyxsy6FvZSAoTUFkNMzfzHCG4W9eNzYREdnpLT+w13o3SrYAvl4LQ2
+v2vkm2VS9rJtMSVCWP7BBPgMtcq0+gxEchAArQoGg9W6Ci8AEQEAAYkCEAQYAQoA
+JgIbDBYhBJqpvbEbsbmaIShaMwZkp2lUJl6MBQJg98CABQkO3BZIAAoJEAZkp2lU
+Jl6MVBUOn1dAdDmIMbnWfzxkodYFxw46HrnnBoy6u/N1I7nCLBQS0vfE9Hsu30Ef
+lISsd0bV0ftsmBs5F/58oXUTAvwzc2z3LzdNaauugPaUJn6VgDPjrkVJriI1UB1L
+sU4zRoa8MmxyfLfzk5ya0LLK+mt4SmBAHdOG8qvoszt8OIpkH2MkVbtzMe+G0UJ/
+qGWARHlXNpiEwQkbfCY5kKrOW3NXvR0LnMc9FIKecB8kbsieZiYJltS038q/Nu+O
+VRWbDGxT5ed5eedFANKMR6JTElaIeEilZMajhuQ7ZXnYeyR5jw3qg3W4NNKgl5R7
+dm9p2T3/9xKTx9LNXZrROUlmsUxsagSF9rzYxcg2XrorjX1PoZpjzIoVS4X5Zt28
+CAoPaORBTlviD5UMvWeCXPh9TxFKR+SGhnP5WWlptTjGWhVDacZtA5q2lx4XAMQm
+bHCnR/cFF88pr9nKfKfwvmE2p2snjt6Tdzvgry0mK4klW0btpidStiYp1VTpGhpF
+P/wNmIYUl4dbOZHXAtfsC/WNxsl2saM70S3HrI7jcNmX4z7cryYGlLUZZBf0F674
+lq8Mx5/+l9T86B6keKLTH5ldWTfwY0FGxFRTVE9KvaLpj/M1+lHdu/uUY7kBDQRT
+pyxNAQgAxT/lDk2Sfjl8naZmypnRjlaCSc/LHu5TLNd/U/kzS68pNxBFhfhqmweF
+YM8c6xo8ADEo3kJADG+0m5/laWyX9SQzxQR6GCUJoOgl+JBUWhmU+gx22I4ImufV
+pHZBGE7Qeyj5GxVpXqP0WU9rt3/Hk3naz+3YUl9GszdJQ7rv8Aa8Hnc0lfgIj69d
+K0Ggk6dVfLCm4c+a8jlx0FtBnKbOia2kczFvqKChV95T6tKWWu6i/RerBOLAxb7T
+nW0SaGUtW/PGmaxDRsfCkq3DMwEavVAZ9aZbBBuP9wUb/wYBx2hfnfe28udkdFVc
+iF6S5ZHadVJOA/XEKbYGh+FAMiNb6wARAQABiQIQBBgBCgAmAhsgFiEEmqm9sRux
+uZohKFozBmSnaVQmXowFAmD3wIQFCQ7cFjcACgkQBmSnaVQmXoxaaw6fYmJZ37AK
+LQnPRyAi4/P/vstSl0Yd9FCs68n8A3Hp2wH/DbKl7aT0km8FVAZ+7cpdBmJgFYld
+HvKLw0m7fo/58RrzHEbw/b90b+tRGbuozPMIK6Lrxa6T1Sp93SUbDK2VSXKI7KMK
+Na5LuCEZ1JSBg3b0w9Q0EWuEvCAxcTq9BvSDn+1dWc/QPOuAkU996c9a6Cz92ZfE
+SBvh6xD2dMYV9pgPuowXV0OCD0P2fJr+d/n3ADUMfni2Qs4u7dVtnmFgXCw1f/p/
+ZdH9sFkPlLcqBZQJEQUS1YZCH/Jw4VHH6jRjKU5YGvveUuWw07pycHrhokKL0iRz
+zJJ7Rl5ucfBTZZhUq8gcpUfGRONVWm6jTyAXVmjnmjK7ZgF8m9fEhTRnNt246MSW
+6lNXFS0hichYlffPhwcAn2Yx3CvWX6B5kGZ1/joeMMCXSqNPgC1rGQ2XbC0+Erav
+GWobZpiTIDEqPSVW7TaIYs6nYAL4ekPK9kfukDnQxfejVWcrhvrkZPXIRn0XM/O6
+pRQTov17NyLs5oDufkb+6QfQp9JCLBLSeavGmTmbSS1fthJDfy/9FRqwKW5u1/Zc
+IudlprcBBCW48N7kIZ55JcszFIDnfiCwkPHIDUPm
+=u3jq
 -----END PGP PUBLIC KEY BLOCK-----

libtasn1.spec

@@ -2,7 +2,6 @@
 # spec file for package libtasn1
 #
 # Copyright (c) 2022 SUSE LLC
-# Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +18,7 @@
 
 %define somajor 6
 Name:           libtasn1
-Version:        4.20.0
+Version:        4.19.0
 Release:        0
 Summary:        ASN.1 parsing library
 License:        GFDL-1.3-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later
@@ -27,8 +26,12 @@ Group:          Productivity/Networking/Security
 URL:            https://www.gnu.org/software/libtasn1/
 Source0:        http://ftp.gnu.org/gnu/libtasn1/%{name}-%{version}.tar.gz
 Source1:        http://ftp.gnu.org/gnu/libtasn1/%{name}-%{version}.tar.gz.sig
-Source2:        https://josefsson.org/key-20190320.txt#/%{name}.keyring
+Source2:        https://josefsson.org/54265e8c.txt#/%{name}.keyring
 Source99:       baselibs.conf
+# PATCH-FIX-UPSTREAM bsc#1236878 CVE-2024-12133: Potential DoS in handling of numerous SEQUENCE OF or SET OF elements
+Patch1:         libtasn1-CVE-2024-12133.patch
+# PATCH-FIX-UPSTREAM bsc#1256341 CVE-2025-13151: Stack-based buffer overflow in asn1_expend_octet_string()
+Patch2:         libtasn1-CVE-2025-13151.patch
 BuildRequires:  pkgconfig
 
 %description
@@ -67,7 +70,7 @@ is a standardized data description and serialization language.
 This package contains files required to build against libtasn1.
 
 %prep
-%autosetup -p1
+%autosetup -p1 -n %{name}-%{version}
 
 %build
 %configure --disable-static
@@ -80,20 +83,21 @@ find %{buildroot} -type f -name "*.la" -delete -print
 %check
 %make_build check
 
-%ldconfig_scriptlets -n libtasn1-%{somajor}
+%post -n libtasn1-%{somajor} -p /sbin/ldconfig
+%postun -n libtasn1-%{somajor} -p /sbin/ldconfig
 
 %files -n libtasn1-%{somajor}
-%license COPYING.LESSERv2
+%license doc/COPYING.LESSER
 %{_libdir}/*.so.%{somajor}*
 
 %files tools
-%license COPYING
+%license doc/COPYING
 %{_bindir}/*
 %{_mandir}/man1/*.1%{?ext_man}
 %{_infodir}/*.info%{?ext_info}
 
 %files devel
-%license COPYING.LESSERv2
+%license doc/COPYING.LESSER
 %doc NEWS README THANKS
 %{_includedir}/*.h
 %{_libdir}/*.so