Changelog for
libtasn1-tools-4.19.0-21.3.i586.rpm :
* Wed Aug 24 2022 Andreas Stieger
- libtasn1 4.19.0:
* Clarify libtasn1.map license
* Fix ETYPE_OK out of bounds read
* Update gnulib files and various maintenance fixes
* Thu Nov 11 2021 Pedro Monreal - Update libtasn1.keyring with upstream keys
* Thu Nov 11 2021 Andreas Stieger - libtasn1 4.18.0:
* Improve GTK-DOC manual
* Improve --help and --version for tools with gnulib
* Update gnulib files and various maintenance fixes- drop libtasn1-rpmlintrc due to no longer being required on TW
* Mon May 17 2021 Andreas Stieger - libtasn1 4.17.0:
* Print deprecation messages for deprecated macros
* Fix some clang issues due to illegal pointers
* Restore handling of SIZE nodes
* Fix memory leak caught by oss-fuzz
* Gtk-doc fixes
* Fix bugs unveiled by Static Analysis
* Update gnulib files and many build fixes- move tools to -tools packages and clarify licenses- update upstream signing keyring- remove deprecated texinfo packaging macros
* Sun Feb 02 2020 Andreas Stieger - libtasn1 4.16.0:
* asn1_decode_simple_ber: added support for constructed definite octet strings
* asn1_get_object_id_der: enhance the range of decoded OIDs
* asn1_object_id_der: New function
* Fri Nov 22 2019 Andreas Stieger - libtasn1 4.15.0:
* The generated tree no longer contains ASN.1 built-in types even if they are explicitly defined in the description. Previously a warning was printed when these types were seen, now they are ignored.
* Several fixes in ASN.1 definition parser, preventing several crashes and leaks in the tools due to improper ASN.1.
* Switched to semantic versioning
* Wed Jul 31 2019 Andreas Stieger - libtasn1 4.14:
* New #defines for version checking
* other developer visible changes- drop libtasn1-object-id-recursion.patch, incorporating the upstream fix for boo#1105435 CVE-2018-1000654
* Mon Apr 29 2019 mgorseAATTsuse.com- Add libtasn1-object-id-recursion.patch: limit recursion in _asn1_expand_object_id (boo#1105435 CVE-2018-1000654 (https://gitlab.com/gnutls/libtasn1/merge_requests/8)
* Thu Feb 22 2018 fvogtAATTsuse.com- Use %license (boo#1082318)
* Fri Jan 19 2018 kbabiochAATTsuse.com- update to 4.13
* On indefinite string decoding, set a maximum level of allowed recursions (3) to protect the BER decoder from a stack exhaustion. (CVE-2018-6003 boo#1076832)