Changelog for
libtasn1-6-debuginfo-3.7-12.2.x86_64.rpm :
* Fri Jun 03 2016 meissnerAATTsuse.com- libtasn1-CVE-2015-3622.patch: Fixed invalid read in octet string decoding (CVE-2015-3622, bsc#929414)- libtasn1-CVE-2016-4008-1.patch, libtasn1-CVE-2016-4008-2.patch: Fixed infinite loop while parsing DER certificates (CVE-2016-4008, bsc#982779)
* Tue Jan 12 2016 mgorseAATTsuse.com- Add libtasn1-bsc961491-value-crash.patch: only assign a value if the previous node had one. Fixes a crash (bsc#961491).
* Fri Apr 24 2015 meissnerAATTsuse.com- libtasn1-CVE-2015-2806.patch: fixed a two-byte stack overflow in asn1_der_decoding (bsc#924828 CVE-2015-2806)- info deinstall needs to be in %preun
* Fri Jul 25 2014 mgorseAATTsuse.com- updated to libtasn1 3.7:
* Noteworthy changes in release 3.7 (released 2014-06-26) [stable] - Fixes in length calculation in _asn1_extract_der_octet(). - Fixes in DER decoding. - Fixes: CVE-2014-3468 CVE-2014-3467 CVE-2014-3469 bnc#880738 bnc#880737 bnc#880735
* Tue Jun 03 2014 meissnerAATTsuse.com- libtasn1.keyring: added Nikos Mavrogiannopoulos
key, who did this release (and shares responsibility with Simon).- updated to libtasn1 3.6
* Noteworthy changes in release 3.6 (released 2014-05-25) [stable] - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735) - Several improvements and new safety checks on DER decoding; issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738, CVE-2014-3467/bnc#880737) - Marked asn1_der_decoding_element() as deprecated. Use asn1_der_decoding() instead.
* Noteworthy changes in release 3.5 (released 2014-05-01) [stable] - Correctly handle decoding of recursive CHOICE options. - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara. - Several small bug fixes found by coverity. - Code improvements contributed by Kurt Roeckx.
* Noteworthy changes in release 3.4 (released 2013-11-25) [stable] - Added asn1_delete_structure2() which allows zeroizing the contents of all values in the structure prior to deinitialization. - The parser accepts negative numbers in an INTEGER range (but still does no enforce them).
* Tue Jun 25 2013 cooloAATTsuse.com- remove gpg source checking again to avoid this cycle: libtasn1 -> libssh2_org -> openssh -> krb5 -> python-Jinja2 -> vim -> libtasn1
* Thu Jun 20 2013 meissnerAATTsuse.com- updated to libtasn1 3.3
* Noteworthy changes in release 3.3 (released 2013-03-23) [stable] - More precise overflow checks using gnulib\'s intprops module. - Updates to compile in Android systems.
* Noteworthy changes in release 3.2 (released 2012-11-30) [stable] - Corrected buffer overflow in the error reporting of the parser (reported by Andreas Metzler).
* Noteworthy changes in release 3.1 (released 2012-11-24) [stable] - Completed rename of types: ASN1_ARRAY_TYPE -> asn1_static_node (was asn1_static_node_t) - Added new types: VisibleString, NumericString, IA5String, TeletexString, PrintableString, UniversalString, BMPString, UTF8String. When re-defined a warning is being print instead of failing. - Parser outputs more detailed syntax error messages. - Added asn1_decode_simple_der() and asn1_encode_simple_der(). - Added asn1_read_value_type() to return value and type. - Introduced ASN1_ETYPE_UTC_TIME and ASN1_ETYPE_GENERALIZED_TIME- added gpg source checking
* Sat Nov 17 2012 andreas.stiegerAATTgmx.de- update to libtasn1 3.0, SONAME libtasn1.so.6 - Added tool in tests/ to benchmark X.509 structure decoding. - Added asn1_read_node_value() to obtain a node\'s value. - Optimizations in internal tree allocation. - Optimizations in tree search. - libtasn1.h no longer exports internal structures. - Types were renamed for consistency: ASN1_DATA_NODE -> asn1_data_node_st ASN1_ARRAY_TYPE -> asn1_static_node ASN1_TYPE -> asn1_node ASN1_TYPE_EMPTY -> NULL static_struct_asn -> asn1_static_node_st node_asn_struct -> asn1_node_st node_asn -> asn1_node_st (the old types are still available as definitions)- fix W: devel-package-with-non-devel-group
* Fri Sep 28 2012 meissnerAATTsuse.com- updated to version 2.14 This release adds asn1_read_node_value() to obtain a node\'s value. This is to deprecate the export of the node_asn internal structure for the upcoming 3.x release. The ASN1_DATA_NODE type and the ASN1_ETYPE_
* constants were added to support the new function.- removed upstreamed libtasn1-stdio.h patch- make check
* Sun Jul 22 2012 ajAATTsuse.de- Fix build with missing gets declaration (glibc 2.16)
* Fri Jun 29 2012 cfarrellAATTsuse.com- license update: LGPL-2.1+ and GPL-3.0 Tools are GPL-3.0
* Sat Apr 14 2012 tabrahamAATTnovell.com- update to version 2.12 + Cleanup license headers. + build: Update gnulib files. + Corrected DER decoding issue (reported by Matthew Hall). Added self check to detect the problem, see tests/Test_overflow.c. This problem can lead to at least remotely triggered crashes, see further analysis on the libtasn1 mailing list.
* Sun Jan 08 2012 tabrahamAATTnovell.com- update to version 2.11 + qa: now builds without compiler warnings with Solaris CC + qa: added clang analysis. fixed cyclomatic complexity output + tests: added self-test of bit string functions + build: added windows/libtasn14win.mk rules to produce Windows binaries + build: don\'t hard code path to perl in doc/gdoc + various minor fixes- changes in version 2.10 + lib: small optimization, possibly working around gcc/valgrind issue + build: update gnulib files + asn1Coding: actually implement the -c parameter + asn1Decoding: the -c parameter serves no purpose. remove it. + doc: add examples to asn1Coding and ans1Decoding description- changes in version 2.9 + tests: link to gnulib to avoid build error related to \'rpl_ftello\' on Solaris. Reported by Dagobert Michelsen + doc: fix bug reporting address to point at help-libtasn1AATTgnu.org + doc: fix returns: documentation in Texinfo. Reported by Jeffery Walton + build : update gnulib files- changes in version 2.8 + update gnulib files + use libtool 2.2.10 to ease MinGW64 builds- changes in version 2.7 + Doc: build PDF manual using GTK-DOC + Doc: fix of asn1_check_version, documentation was missing from last release + Build: avoid warnings about ignored visibility attributes on Windows- changes in version 2.6 + Fix build failure on platforms without support for GNU_LD version scripts + libtasn1: simplified implementation of asn1_check_version + tests: improved self-checks + update gnulib files, fix many syntax-check nits, indent code, fix license templates- changes in version 2.5 + doc: improve GTK-DOC comments + misc: updated gnulib files- changes in version 2.4 + Doc fixes + updated gnulib files + clean up copyright notices- changes in version 2.3 + libtasn1 is now an official GNU project + solve build problem on Tru64 related to TRUE/FALSE + More careful decoding of OIDs + Fixed warning in ANS1.y + Use \"Software libraries\" info dircategory + Drop GPL/LGPL copies from the manual (not needed there) + New configure parameters to set packagin specific information The parameters are --with-packager, --with-packager-version, and --with-packager-bug-reports. See for more details.
* Sun Oct 31 2010 jengelhAATTmedozas.de- Use %_smp_mflags
* Sat Apr 24 2010 cooloAATTnovell.com- buildrequire pkg-config to fix provides
* Thu Dec 17 2009 jengelhAATTmedozas.de- Add baselibs.conf as a source
* Thu May 21 2009 vuntzAATTnovell.com- Update to version 2.2: + Change how the ASN1_API decorator is used in libtasn1.h, for GTK-DOC. + Changed license of libtasn1.pc from GPLv3+ to LGPLv2.1+. + Building with many warning flags now requires - -enable-gcc-warnings. + Some warnings fixed.- Fix license of library packages: it\'s LGPL not GPL.
* Wed May 06 2009 vuntzAATTnovell.com- Update to version 2.1: + Fix compilation failure on platforms that can\'t generate empty archives, e.g., Mac OS X.- Changes from version 2.0: + Optimized tree generation. + ASN1 parser code re-generated using Bison 2.4.1. + Build with more warning flags. Many compiler warnings fixed. + Compiled with -fvisibility=hidden by default if supported. See http://gcc.gnu.org/wiki/Visibility + The libtasn1-config tool has been removed. For application developers, please stop using libtasn1-config for finding libtasn1, use proper autoconf checks or pkg-config instead.- Remove AutoReqProv: it\'s default now.- Pass --disable-static to configure.