Changelog for libtasn1-devel-3.7-150400.13.10.7.x86_64.rpm :

* Fri Jun 03 2016 meissnerAATTsuse.com- libtasn1-CVE-2015-3622.patch: Fixed invalid read in octet string decoding (CVE-2015-3622, bsc#929414)- libtasn1-CVE-2016-4008-1.patch, libtasn1-CVE-2016-4008-2.patch: Fixed infinite loop while parsing DER certificates (CVE-2016-4008, bsc#982779)
* Tue Jan 12 2016 mgorseAATTsuse.com- Add libtasn1-bsc961491-value-crash.patch: only assign a value if the previous node had one. Fixes a crash (bsc#961491).
* Fri Apr 24 2015 meissnerAATTsuse.com- libtasn1-CVE-2015-2806.patch: fixed a two-byte stack overflow in asn1_der_decoding (bsc#924828 CVE-2015-2806)- info deinstall needs to be in %preun
* Fri Jul 25 2014 mgorseAATTsuse.com- updated to libtasn1 3.7:
* Noteworthy changes in release 3.7 (released 2014-06-26) [stable] - Fixes in length calculation in _asn1_extract_der_octet(). - Fixes in DER decoding. - Fixes: CVE-2014-3468 CVE-2014-3467 CVE-2014-3469 bnc#880738 bnc#880737 bnc#880735
* Tue Jun 03 2014 meissnerAATTsuse.com- libtasn1.keyring: added Nikos Mavrogiannopoulos key, who did this release (and shares responsibility with Simon).- updated to libtasn1 3.6
* Noteworthy changes in release 3.6 (released 2014-05-25) [stable] - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735) - Several improvements and new safety checks on DER decoding; issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738, CVE-2014-3467/bnc#880737) - Marked asn1_der_decoding_element() as deprecated. Use asn1_der_decoding() instead.
* Noteworthy changes in release 3.5 (released 2014-05-01) [stable] - Correctly handle decoding of recursive CHOICE options. - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara. - Several small bug fixes found by coverity. - Code improvements contributed by Kurt Roeckx.
* Noteworthy changes in release 3.4 (released 2013-11-25) [stable] - Added asn1_delete_structure2() which allows zeroizing the contents of all values in the structure prior to deinitialization. - The parser accepts negative numbers in an INTEGER range (but still does no enforce them).
* Tue Jun 25 2013 cooloAATTsuse.com- remove gpg source checking again to avoid this cycle: libtasn1 -> libssh2_org -> openssh -> krb5 -> python-Jinja2 -> vim -> libtasn1
* Thu Jun 20 2013 meissnerAATTsuse.com- updated to libtasn1 3.3
* Noteworthy changes in release 3.3 (released 2013-03-23) [stable] - More precise overflow checks using gnulib\'s intprops module. - Updates to compile in Android systems.
* Noteworthy changes in release 3.2 (released 2012-11-30) [stable] - Corrected buffer overflow in the error reporting of the parser (reported by Andreas Metzler).
* Noteworthy changes in release 3.1 (released 2012-11-24) [stable] - Completed rename of types: ASN1_ARRAY_TYPE -> asn1_static_node (was asn1_static_node_t) - Added new types: VisibleString, NumericString, IA5String, TeletexString, PrintableString, UniversalString, BMPString, UTF8String. When re-defined a warning is being print instead of failing. - Parser outputs more detailed syntax error messages. - Added asn1_decode_simple_der() and asn1_encode_simple_der(). - Added asn1_read_value_type() to return value and type. - Introduced ASN1_ETYPE_UTC_TIME and ASN1_ETYPE_GENERALIZED_TIME- added gpg source checking
* Sat Nov 17 2012 andreas.stiegerAATTgmx.de- update to libtasn1 3.0, SONAME libtasn1.so.6 - Added tool in tests/ to benchmark X.509 structure decoding. - Added asn1_read_node_value() to obtain a node\'s value. - Optimizations in internal tree allocation. - Optimizations in tree search. - libtasn1.h no longer exports internal structures. - Types were renamed for consistency: ASN1_DATA_NODE -> asn1_data_node_st ASN1_ARRAY_TYPE -> asn1_static_node ASN1_TYPE -> asn1_node ASN1_TYPE_EMPTY -> NULL static_struct_asn -> asn1_static_node_st node_asn_struct -> asn1_node_st node_asn -> asn1_node_st (the old types are still available as definitions)- fix W: devel-package-with-non-devel-group
* Fri Sep 28 2012 meissnerAATTsuse.com- updated to version 2.14 This release adds asn1_read_node_value() to obtain a node\'s value. This is to deprecate the export of the node_asn internal structure for the upcoming 3.x release. The ASN1_DATA_NODE type and the ASN1_ETYPE_
* constants were added to support the new function.- removed upstreamed libtasn1-stdio.h patch- make check
* Sun Jul 22 2012 ajAATTsuse.de- Fix build with missing gets declaration (glibc 2.16)