Accepting request 305052 from Base:System

1

OBS-URL: https://build.opensuse.org/request/show/305052
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtasn1?expand=0&rev=37

libtasn1-4.4.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f8349db1b4fe634105c77e11d26b2173e587827e86e1a489b5e38ffa822e0c5d
-size 1849451

libtasn1-4.4.tar.gz.sig

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iQEcBAABAgAGBQJVF82UAAoJEJ1eqvaQE7hCDyYH/1DcQ5lff04mC72fRijHmxj6
-6DjEL9Xe1Ls6InCLJb0GfsKyX5tsSrl8nAWkP4AyqkdYSg+W33mgcbYmLLLOnIC1
-G1E+7fCl2FARtbLmJqXa2BtghQUxW8iN4jah9sIfmm/DO5NR1nSphJkuiIvvgeug
-omVMmK9S/7cG7w9XZMPO5acRt3L+wvlc0owu+KdTXIvJ5yImpEW6ennjFxFelW9Z
-fyz/Uuoh+dEpBFoQDXBU6HkikHvs8r3YhW0ahyZy7rPQAp2JojcZaJD7/D/QTlE7
-2t7LO7AmfkC+cYLOGZ9q+DzEmnFd81dpyLCPMibS57CnDJwweKlt1foCg+9m7/8=
-=9pAG
------END PGP SIGNATURE-----

libtasn1-4.5.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:89b3b5dce119273431544ecb305081f3530911001bb12e5d76588907edb71bda
+size 1850279

libtasn1-4.5.tar.gz.sig

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iQEcBAABAgAGBQJVQSlvAAoJEJ1eqvaQE7hCDD8H/iCBsRZ+MDrx0RkHSoVaOd1L
+z2CU1XBh+PADS2xuyzvWdBE6jiMNKqN66V32eLtRO7gvlrgUC1hT/VvgQtOj1jOo
+QkoFYuCPxjaP3p95dugXLByA3JrPB5AzxE4g9aVpKbBhmw+cYWSXPRxDz7oI9z0G
+s40FA41bWSTfRbRbNwvSRDV3lf+SSvzMUXnoUhBeVcLnb9Kuo/hNIZGHoCZrmSJ9
+WOMIutl2QbDfOR9hj7QVLZIbSGMIZzmAJWaZjVdwCy0ivK2PNwIngGSKJpVQW5B4
+0V8REDieR023KutCZO1572qMW4jMcUceJTZp4NpcoPqfZilq8UIIOZnf/lgtsp8=
+=VXGP
+-----END PGP SIGNATURE-----

libtasn1.changes

@@ -1,8 +1,16 @@
+-------------------------------------------------------------------
+Fri May  1 19:33:32 UTC 2015 - astieger@suse.com
+
+- update libtasn1 4.5:
+  * Corrected an invalid memory access in octet string decoding.
+    CVE-2015-3622 [boo#929414]
+
 -------------------------------------------------------------------
 Sun Mar 29 17:27:11 UTC 2015 - astieger@suse.com
 
 - update to libtasn1 4.4 [bsc#924828]:
   * Corrected a two-byte stack overflow in asn1_der_decoding.
+    CVE-2015-2806    
 
 -------------------------------------------------------------------
 Sun Mar 22 10:41:46 UTC 2015 - mpluskal@suse.com

libtasn1.spec

@@ -18,7 +18,7 @@
 
 %define somajor 6
 Name:           libtasn1
-Version:        4.4
+Version:        4.5
 Release:        0
 Summary:        ASN.1 parsing library
 License:        LGPL-2.1+ and GPL-3.0