From 13764fd5f876ac7541f936b8e17f21f4f03e6ea9c89b102606a9060c2f43e9c9 Mon Sep 17 00:00:00 2001 From: Stephan Kulow Date: Fri, 6 Jun 2014 12:36:15 +0000 Subject: [PATCH] Accepting request 236130 from Base:System - updated to libtasn1 3.6 * Noteworthy changes in release 3.6 (released 2014-05-25) [stable] - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735) - Several improvements and new safety checks on DER decoding; issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738, CVE-2014-3467/bnc#880737) - Marked asn1_der_decoding_element() as deprecated. Use asn1_der_decoding() instead. * Noteworthy changes in release 3.5 (released 2014-05-01) [stable] - Correctly handle decoding of recursive CHOICE options. - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara. - Several small bug fixes found by coverity. - Code improvements contributed by Kurt Roeckx. * Noteworthy changes in release 3.4 (released 2013-11-25) [stable] - Added asn1_delete_structure2() which allows zeroizing the contents of all values in the structure prior to deinitialization. - The parser accepts negative numbers in an INTEGER range (but still does no enforce them). OBS-URL: https://build.opensuse.org/request/show/236130 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtasn1?expand=0&rev=29 --- baselibs.conf | 1 + libtasn1-3.3.tar.gz | 3 --- libtasn1-3.3.tar.gz.sig | 11 ----------- libtasn1-3.6.tar.gz | 3 +++ libtasn1-3.6.tar.gz.sig | 11 +++++++++++ libtasn1.changes | 24 ++++++++++++++++++++++++ libtasn1.spec | 4 ++-- 7 files changed, 41 insertions(+), 16 deletions(-) delete mode 100644 libtasn1-3.3.tar.gz delete mode 100644 libtasn1-3.3.tar.gz.sig create mode 100644 libtasn1-3.6.tar.gz create mode 100644 libtasn1-3.6.tar.gz.sig diff --git a/baselibs.conf b/baselibs.conf index b0e0088..7fbf900 100644 --- a/baselibs.conf +++ b/baselibs.conf @@ -1 +1,2 @@ libtasn1-6 +libtasn1-devel diff --git a/libtasn1-3.3.tar.gz b/libtasn1-3.3.tar.gz deleted file mode 100644 index cbcc357..0000000 --- a/libtasn1-3.3.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:92652a2cd10f63c56984b5e5cee46ecadf2292e2262fff99278f7ee46ff93ac0 -size 2039225 diff --git a/libtasn1-3.3.tar.gz.sig b/libtasn1-3.3.tar.gz.sig deleted file mode 100644 index 76a5925..0000000 --- a/libtasn1-3.3.tar.gz.sig +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v1.4.12 (GNU/Linux) - -iQEcBAABAgAGBQJRTtprAAoJEGDO5xEQXnIuHM0H/iZBI9rADxJ9wbZs2jFmPrwi -DsbzgbQpqosVVWV1NNDVyMshOr2sFpUL+RWGxyAPl4mqAHxOrISmyFgfwBSL2rlN -1KJCD5LlLWWAukAGAfZhF7VEXqRoguXEjrKGNRa8Ic0WvP60u/qUuxG1Omv5hIpl -6MoKlBHa3WpEYt1+orF6N5TCttENqMuM5xIVk1r7ySNnZzBdzo3BuupObO40VB2k -m+ksQLWbajEaed+cqkeepHW7rfAKOphbVwOIgDoB3ZtT6N4bk2VonseocCUooUjS -74/mzWhq0+G13WB/JEO+vztQEODRYHiv4OhuwB0V7sb4C9HQ+c5KtXrsPswYxYg= -=fJSu ------END PGP SIGNATURE----- diff --git a/libtasn1-3.6.tar.gz b/libtasn1-3.6.tar.gz new file mode 100644 index 0000000..76ab2b6 --- /dev/null +++ b/libtasn1-3.6.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:19e34766a38abc74cec1863cc30c8a4e13f763310ecaf7a5e861ba1d143ea430 +size 1849205 diff --git a/libtasn1-3.6.tar.gz.sig b/libtasn1-3.6.tar.gz.sig new file mode 100644 index 0000000..40c918d --- /dev/null +++ b/libtasn1-3.6.tar.gz.sig @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1 + +iQEcBAABAgAGBQJTgkbRAAoJEJ1eqvaQE7hCNrQH/2wLWalhIGdXZu2SQhXlGm4m +pMxEJ8WtdbA57C5aD08ZnElRwU2/abqb8K8wvAAGQWJcOlNY2Y18/gMcpbuxySZD +LUQX8lZyCLeACTnw881Ox8OgWBBBsTcXuA+HQfxfZ3AjiWQYhaPIyZslXw8BcSRs +V/Osfp/y5BvMbIKGd81sfgQipgNNuvhlWIUKpC8IZ9rUBGsa+pvRWHgrg6H0r+l/ +P2ukfxl8YCinpKy/C7KbrZbDxUlDnGzOdd6kkeN+orNimVVA2oeEjKdvQHgJsdfO +PEA5od5k/LpesQUJBVmp2rhXkVds7cO7LFp6ZZtXs4vIrbXepryErZ53C4kImKY= +=4vfn +-----END PGP SIGNATURE----- diff --git a/libtasn1.changes b/libtasn1.changes index 626e080..b30e68c 100644 --- a/libtasn1.changes +++ b/libtasn1.changes @@ -1,3 +1,27 @@ +------------------------------------------------------------------- +Tue Jun 3 09:20:18 UTC 2014 - meissner@suse.com + +- updated to libtasn1 3.6 + * Noteworthy changes in release 3.6 (released 2014-05-25) [stable] + - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735) + - Several improvements and new safety checks on DER decoding; + issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738, + CVE-2014-3467/bnc#880737) + - Marked asn1_der_decoding_element() as deprecated. Use + asn1_der_decoding() instead. + + * Noteworthy changes in release 3.5 (released 2014-05-01) [stable] + - Correctly handle decoding of recursive CHOICE options. + - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara. + - Several small bug fixes found by coverity. + - Code improvements contributed by Kurt Roeckx. + + * Noteworthy changes in release 3.4 (released 2013-11-25) [stable] + - Added asn1_delete_structure2() which allows zeroizing the contents + of all values in the structure prior to deinitialization. + - The parser accepts negative numbers in an INTEGER range (but + still does no enforce them). + ------------------------------------------------------------------- Tue Jun 25 12:01:36 UTC 2013 - coolo@suse.com diff --git a/libtasn1.spec b/libtasn1.spec index 3c1d1ba..d8324db 100644 --- a/libtasn1.spec +++ b/libtasn1.spec @@ -1,7 +1,7 @@ # # spec file for package libtasn1 # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ Name: libtasn1 BuildRequires: info BuildRequires: pkg-config #BuildRequires: gpg-offline -Version: 3.3 +Version: 3.6 Release: 0 Url: http://ftp.gnu.org/gnu/libtasn1/ Summary: ASN.1 parsing library