Accepting request 502798 from Base:System

1

OBS-URL: https://build.opensuse.org/request/show/502798
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtasn1?expand=0&rev=42

0001-configure-don-t-add-Werror-to-build-flags.patch

@@ -1,32 +0,0 @@
-From dd091c8af163213e12aa92f61bc4916e0f102633 Mon Sep 17 00:00:00 2001
-From: Nikos Mavrogiannopoulos <nmav@redhat.com>
-Date: Tue, 26 Jul 2016 08:45:33 +0200
-Subject: [PATCH] configure: don't add -Werror to build flags
-References: http://git.savannah.gnu.org/gitweb/?p=libtasn1.git;a=commit;h=dd091c8af163213e12aa92f61bc4916e0f102633
-
-Fixing:
-[   81s] Test_overflow.c: In function 'main':
-[   81s] Test_overflow.c:63:45: error: left shift of negative value [-Werror=shift-negative-value]
-[   81s]        unsigned long num = ((long) UINT_MAX) << 2;
-[   81s]                                              ^~
-
----
- configure.ac | 2 --
- 1 file changed, 2 deletions(-)
-
-diff --git a/configure.ac b/configure.ac
-index 7a14e04..066f5fe 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -70,8 +70,6 @@ AC_ARG_ENABLE([gcc-warnings],
- )
- 
- if test "$gl_gcc_warnings" = yes; then
--  gl_WARN_ADD([-Werror], [WERROR_CFLAGS])
--
-   nw="$nw -Wsystem-headers"         # Don't let system headers trigger warnings
-   nw="$nw -Wc++-compat"             # We don't care strongly about C++ compilers
-   nw="$nw -Wtraditional"            # Warns on #elif which we use often
--- 
-2.6.6
-

libtasn1-4.12.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6753da2e621257f33f5b051cc114d417e5206a0818fe0b1ecfd6153f70934753
+size 1888450

libtasn1-4.12.tar.gz.sig

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEqBLL/fzcTQvnoJMSnV6q9pATuEIFAlkrpskACgkQnV6q9pAT
+uEJUDAgAvuyk8OiDjuaZGAgNo1ggReWsgAjjW/rPnkdKEdjjz4jJtx/fh6OTgJeq
+zJXy4VhtQyFOLL4MHqshqKij69Cj5sCbIMGkfoLhkz8YnWD4hM3qe7p3LfeupZFH
+Wje3nwtsqY4gnwePeKeZBSv8zRlVEgGQH/wN+fikJDi8+Zt+DWWEdXEm8/ry1P1e
+xLjRSHxqQpcpI4IGu2rFbV+0TgOxRfU75pswie9JU3FsNrmQvX7VXPEK+zbUGkDx
+nM+h3Yb3TQ2jTkDAohYdir3vNEO7cYg42E3tGrx4q1s0f8PAhrSSk+gv/6qorphR
+Oq0AUB3eH6vjBVTGvO3wtP/MUfYJ4g==
+=4+2H
+-----END PGP SIGNATURE-----

libtasn1-4.9.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4f6f7a8fd691ac2b8307c8ca365bad711db607d4ad5966f6938a9d2ecd65c920
-size 1864709

libtasn1-4.9.tar.gz.sig

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iQEcBAABCAAGBQJXlnbOAAoJEJ1eqvaQE7hCPTEH/j8DerBEemjLY/UwlDfFC/q7
-eCj4NeeHJadoIiW2LFOQHKOsTpGE6REQ/4iPlAef50yyEzGlBXLQk2iZiRjWF1Hw
-acoVx8G4Xuw21We+QRjSGmQv9XQzAipMGOefvuA7qS2/2XgG6+1JmhYZdxAw91G4
-tlHe2jPYb0z+xDQueQPrLPhQcVBUzDIaonVzH/d4Z4Y7qE53P8UD115cYf0sdnOq
-0E2lX6ztYIzIjITEeIboDwVZysXFrQ3XIoNvdqXXGm3qOc4Th6rhzl56wxzJxwmL
-1el6sLw5XrAD0jNjduMLrvOS9duxqFRXL9lZaQcWcoKHmIZQi2mb4VXHYANwJxM=
-=AGhi
------END PGP SIGNATURE-----

libtasn1.changes

@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Sun Jun  4 19:41:21 UTC 2017 - astieger@suse.com
+
+- libtasn1 4.12:
+  * Corrected so-name version
+- includes changes in 4.11:
+  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
+    an invalid encoding in the DER time fields.
+  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
+    allows decoding errors in time fields even when in strict DER mode.
+    That is introduced in order to allow toleration of invalid times in
+    X.509 certificates (which are common) even though strict DER adherence
+    is enforced in other fields.
+  * Added safety check in asn1_find_node(). That prevents a crash
+    when a very long variable name is provided by the developer.
+    Note that this to be exploited requires controlling the ASN.1
+    definitions used by the developer, i.e., the 'name' parameter of
+    asn1_write_value() or asn1_read_value(). The library is
+    not designed to protect against malicious manipulation of the
+    developer assigned variable names
+- includes changes from 4.10:
+  * Updated gnulib
+  * Removed -Werror from default compiler flags
+    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
+  * Fixed undefined behavior when negating integers in _asn1_ltostr().
+  * Pass the correct length to _asn1_get_indefinite_length_string in
+    asn1_get_length_ber. This addresses reading 1-byte past the end
+    of data.
+
 -------------------------------------------------------------------
 Wed Aug 10 18:57:51 UTC 2016 - astieger@suse.com
 
@@ -5,6 +34,7 @@ Wed Aug 10 18:57:51 UTC 2016 - astieger@suse.com
   * Fix OID encoding of OIDs which have elements which exceed 2^32
 - Do not treat i586 warning as error, adding upstream
   0001-configure-don-t-add-Werror-to-build-flags.patch
+- fate#322523
 
 -------------------------------------------------------------------
 Mon Apr 11 14:56:31 UTC 2016 - mpluskal@suse.com
@@ -53,6 +83,7 @@ Sun Mar 22 10:41:46 UTC 2015 - mpluskal@suse.com
 - Add info preun and post dependencies
 - Update to 4.3
   * Added asn1_decode_simple_ber()
+  * Only assign a value if the previous node has one (bsc#961491).
 
 -------------------------------------------------------------------
 Sat Feb 14 08:12:10 UTC 2015 - jengelh@inai.de

libtasn1.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libtasn1
 #
-# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %define somajor 6
 Name:           libtasn1
-Version:        4.9
+Version:        4.12
 Release:        0
 Summary:        ASN.1 parsing library
 License:        LGPL-2.1+ and GPL-3.0
@@ -29,13 +29,6 @@ Source1:        ftp://ftp.gnu.org/gnu/%{name}/%{name}-%{version}.tar.gz.sig
 # http://josefsson.org/key.txt
 Source2:        %{name}.keyring
 Source99:       baselibs.conf
-Patch0:         0001-configure-don-t-add-Werror-to-build-flags.patch
-# for patch0 0001-configure-don-t-add-Werror-to-build-flags.patch
-BuildRequires:  autoconf
-BuildRequires:  automake
-BuildRequires:  help2man
-BuildRequires:  libtool
-#
 BuildRequires:  info
 BuildRequires:  pkgconfig
 Requires(post): %{install_info_prereq}
@@ -69,12 +62,8 @@ http://www.gnutls.org
 
 %prep
 %setup -q
-%patch0 -p1
 
 %build
-# for patch0 0001-configure-don-t-add-Werror-to-build-flags.patch
-autoreconf -fiv
-#
 %configure --disable-static
 make %{?_smp_mflags} V=1