Accepting request 236130 from Base:System

- updated to libtasn1 3.6
  * Noteworthy changes in release 3.6 (released 2014-05-25) [stable]
  - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735)
  - Several improvements and new safety checks on DER decoding;
    issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738,
    CVE-2014-3467/bnc#880737)
  - Marked asn1_der_decoding_element() as deprecated. Use
    asn1_der_decoding() instead.
  * Noteworthy changes in release 3.5 (released 2014-05-01) [stable]
  - Correctly handle decoding of recursive CHOICE options.
  - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara.
  - Several small bug fixes found by coverity.
  - Code improvements contributed by Kurt Roeckx.
  * Noteworthy changes in release 3.4 (released 2013-11-25) [stable]
  - Added asn1_delete_structure2() which allows zeroizing the contents
    of all values in the structure prior to deinitialization.
  - The parser accepts negative numbers in an INTEGER range (but
    still does no enforce them).

OBS-URL: https://build.opensuse.org/request/show/236130
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtasn1?expand=0&rev=29

baselibs.conf

@@ -1 +1,2 @@
 libtasn1-6
+libtasn1-devel

libtasn1-3.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:92652a2cd10f63c56984b5e5cee46ecadf2292e2262fff99278f7ee46ff93ac0
-size 2039225

libtasn1-3.3.tar.gz.sig

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.12 (GNU/Linux)
-
-iQEcBAABAgAGBQJRTtprAAoJEGDO5xEQXnIuHM0H/iZBI9rADxJ9wbZs2jFmPrwi
-DsbzgbQpqosVVWV1NNDVyMshOr2sFpUL+RWGxyAPl4mqAHxOrISmyFgfwBSL2rlN
-1KJCD5LlLWWAukAGAfZhF7VEXqRoguXEjrKGNRa8Ic0WvP60u/qUuxG1Omv5hIpl
-6MoKlBHa3WpEYt1+orF6N5TCttENqMuM5xIVk1r7ySNnZzBdzo3BuupObO40VB2k
-m+ksQLWbajEaed+cqkeepHW7rfAKOphbVwOIgDoB3ZtT6N4bk2VonseocCUooUjS
-74/mzWhq0+G13WB/JEO+vztQEODRYHiv4OhuwB0V7sb4C9HQ+c5KtXrsPswYxYg=
-=fJSu
------END PGP SIGNATURE-----

libtasn1-3.6.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:19e34766a38abc74cec1863cc30c8a4e13f763310ecaf7a5e861ba1d143ea430
+size 1849205

libtasn1-3.6.tar.gz.sig

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iQEcBAABAgAGBQJTgkbRAAoJEJ1eqvaQE7hCNrQH/2wLWalhIGdXZu2SQhXlGm4m
+pMxEJ8WtdbA57C5aD08ZnElRwU2/abqb8K8wvAAGQWJcOlNY2Y18/gMcpbuxySZD
+LUQX8lZyCLeACTnw881Ox8OgWBBBsTcXuA+HQfxfZ3AjiWQYhaPIyZslXw8BcSRs
+V/Osfp/y5BvMbIKGd81sfgQipgNNuvhlWIUKpC8IZ9rUBGsa+pvRWHgrg6H0r+l/
+P2ukfxl8YCinpKy/C7KbrZbDxUlDnGzOdd6kkeN+orNimVVA2oeEjKdvQHgJsdfO
+PEA5od5k/LpesQUJBVmp2rhXkVds7cO7LFp6ZZtXs4vIrbXepryErZ53C4kImKY=
+=4vfn
+-----END PGP SIGNATURE-----

libtasn1.changes

@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Tue Jun  3 09:20:18 UTC 2014 - meissner@suse.com
+
+- updated to libtasn1 3.6
+  * Noteworthy changes in release 3.6 (released 2014-05-25) [stable]
+  - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735)
+  - Several improvements and new safety checks on DER decoding;
+    issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738,
+    CVE-2014-3467/bnc#880737)
+  - Marked asn1_der_decoding_element() as deprecated. Use
+    asn1_der_decoding() instead.
+
+  * Noteworthy changes in release 3.5 (released 2014-05-01) [stable]
+  - Correctly handle decoding of recursive CHOICE options.
+  - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara.
+  - Several small bug fixes found by coverity.
+  - Code improvements contributed by Kurt Roeckx.
+
+  * Noteworthy changes in release 3.4 (released 2013-11-25) [stable]
+  - Added asn1_delete_structure2() which allows zeroizing the contents
+    of all values in the structure prior to deinitialization.
+  - The parser accepts negative numbers in an INTEGER range (but
+    still does no enforce them).
+
 -------------------------------------------------------------------
 Tue Jun 25 12:01:36 UTC 2013 - coolo@suse.com
 

libtasn1.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libtasn1
 #
-# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -22,7 +22,7 @@ Name:           libtasn1
 BuildRequires:  info
 BuildRequires:  pkg-config
 #BuildRequires:  gpg-offline
-Version:        3.3
+Version:        3.6
 Release:        0
 Url:            http://ftp.gnu.org/gnu/libtasn1/
 Summary:        ASN.1 parsing library