Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12:Update
libtasn1
libtasn1.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File libtasn1.changes of Package libtasn1
------------------------------------------------------------------- Tue Oct 25 07:35:19 UTC 2022 - Alexander Bergmann <abergmann@suse.com> - Add libtasn1-CVE-2021-46848.patch: Fixed off-by-one array size check that affects asn1_encode_simple_der (CVE-2021-46848, bsc#1204690). ------------------------------------------------------------------- Fri May 6 14:57:32 UTC 2022 - Michael Gorse <mgorse@suse.com> - Add libtasn1-CVE-2017-6891.patch: added safety check to fix a stack overflow issue (CVE-2017-6891, bsc#1040621). ------------------------------------------------------------------- Tue Apr 30 19:00:55 UTC 2019 - mgorse@suse.com - Add libtasn1-object-id-recursion.patch: limit recursion in _asn1_expand_object_id (boo#1105435 CVE-2018-1000654 (https://gitlab.com/gnutls/libtasn1/merge_requests/8) ------------------------------------------------------------------- Fri Jun 3 13:07:57 UTC 2016 - meissner@suse.com - libtasn1-CVE-2015-3622.patch: Fixed invalid read in octet string decoding (CVE-2015-3622, bsc#929414) - libtasn1-CVE-2016-4008-1.patch, libtasn1-CVE-2016-4008-2.patch: Fixed infinite loop while parsing DER certificates (CVE-2016-4008, bsc#982779) ------------------------------------------------------------------- Tue Jan 12 16:52:59 UTC 2016 - mgorse@suse.com - Add libtasn1-bsc961491-value-crash.patch: only assign a value if the previous node had one. Fixes a crash (bsc#961491). ------------------------------------------------------------------- Fri Apr 24 14:54:09 UTC 2015 - meissner@suse.com - libtasn1-CVE-2015-2806.patch: fixed a two-byte stack overflow in asn1_der_decoding (bsc#924828 CVE-2015-2806) - info deinstall needs to be in %preun ------------------------------------------------------------------- Fri Jul 25 16:28:02 UTC 2014 - mgorse@suse.com - updated to libtasn1 3.7: * Noteworthy changes in release 3.7 (released 2014-06-26) [stable] - Fixes in length calculation in _asn1_extract_der_octet(). - Fixes in DER decoding. - Fixes: CVE-2014-3468 CVE-2014-3467 CVE-2014-3469 bnc#880738 bnc#880737 bnc#880735 ------------------------------------------------------------------- Tue Jun 3 09:20:18 UTC 2014 - meissner@suse.com - libtasn1.keyring: added Nikos Mavrogiannopoulos <nmav@gnutls.org> key, who did this release (and shares responsibility with Simon). - updated to libtasn1 3.6 * Noteworthy changes in release 3.6 (released 2014-05-25) [stable] - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735) - Several improvements and new safety checks on DER decoding; issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738, CVE-2014-3467/bnc#880737) - Marked asn1_der_decoding_element() as deprecated. Use asn1_der_decoding() instead. * Noteworthy changes in release 3.5 (released 2014-05-01) [stable] - Correctly handle decoding of recursive CHOICE options. - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara. - Several small bug fixes found by coverity. - Code improvements contributed by Kurt Roeckx. * Noteworthy changes in release 3.4 (released 2013-11-25) [stable] - Added asn1_delete_structure2() which allows zeroizing the contents of all values in the structure prior to deinitialization. - The parser accepts negative numbers in an INTEGER range (but still does no enforce them). ------------------------------------------------------------------- Tue Jun 25 12:01:36 UTC 2013 - coolo@suse.com - remove gpg source checking again to avoid this cycle: libtasn1 -> libssh2_org -> openssh -> krb5 -> python-Jinja2 -> vim -> libtasn1 ------------------------------------------------------------------- Thu Jun 20 12:36:22 UTC 2013 - meissner@suse.com - updated to libtasn1 3.3 * Noteworthy changes in release 3.3 (released 2013-03-23) [stable] - More precise overflow checks using gnulib's intprops module. - Updates to compile in Android systems. * Noteworthy changes in release 3.2 (released 2012-11-30) [stable] - Corrected buffer overflow in the error reporting of the parser (reported by Andreas Metzler). * Noteworthy changes in release 3.1 (released 2012-11-24) [stable] - Completed rename of types: ASN1_ARRAY_TYPE -> asn1_static_node (was asn1_static_node_t) - Added new types: VisibleString, NumericString, IA5String, TeletexString, PrintableString, UniversalString, BMPString, UTF8String. When re-defined a warning is being print instead of failing. - Parser outputs more detailed syntax error messages. - Added asn1_decode_simple_der() and asn1_encode_simple_der(). - Added asn1_read_value_type() to return value and type. - Introduced ASN1_ETYPE_UTC_TIME and ASN1_ETYPE_GENERALIZED_TIME - added gpg source checking ------------------------------------------------------------------- Sat Nov 17 22:17:09 UTC 2012 - andreas.stieger@gmx.de - update to libtasn1 3.0, SONAME libtasn1.so.6 - Added tool in tests/ to benchmark X.509 structure decoding. - Added asn1_read_node_value() to obtain a node's value. - Optimizations in internal tree allocation. - Optimizations in tree search. - libtasn1.h no longer exports internal structures. - Types were renamed for consistency: ASN1_DATA_NODE -> asn1_data_node_st ASN1_ARRAY_TYPE -> asn1_static_node ASN1_TYPE -> asn1_node ASN1_TYPE_EMPTY -> NULL static_struct_asn -> asn1_static_node_st node_asn_struct -> asn1_node_st node_asn -> asn1_node_st (the old types are still available as definitions) - fix W: devel-package-with-non-devel-group ------------------------------------------------------------------- Fri Sep 28 09:23:57 UTC 2012 - meissner@suse.com - updated to version 2.14 This release adds asn1_read_node_value() to obtain a node's value. This is to deprecate the export of the node_asn internal structure for the upcoming 3.x release. The ASN1_DATA_NODE type and the ASN1_ETYPE_* constants were added to support the new function. - removed upstreamed libtasn1-stdio.h patch - make check ------------------------------------------------------------------- Sun Jul 22 06:25:15 UTC 2012 - aj@suse.de - Fix build with missing gets declaration (glibc 2.16) ------------------------------------------------------------------- Fri Jun 29 14:45:07 UTC 2012 - cfarrell@suse.com - license update: LGPL-2.1+ and GPL-3.0 Tools are GPL-3.0 ------------------------------------------------------------------- Sat Apr 14 17:24:30 UTC 2012 - tabraham@novell.com - update to version 2.12 + Cleanup license headers. + build: Update gnulib files. + Corrected DER decoding issue (reported by Matthew Hall). Added self check to detect the problem, see tests/Test_overflow.c. This problem can lead to at least remotely triggered crashes, see further analysis on the libtasn1 mailing list. ------------------------------------------------------------------- Sun Jan 8 16:37:35 UTC 2012 - tabraham@novell.com - update to version 2.11 + qa: now builds without compiler warnings with Solaris CC + qa: added clang analysis. fixed cyclomatic complexity output + tests: added self-test of bit string functions + build: added windows/libtasn14win.mk rules to produce Windows binaries + build: don't hard code path to perl in doc/gdoc + various minor fixes - changes in version 2.10 + lib: small optimization, possibly working around gcc/valgrind issue + build: update gnulib files + asn1Coding: actually implement the -c parameter + asn1Decoding: the -c parameter serves no purpose. remove it. + doc: add examples to asn1Coding and ans1Decoding description - changes in version 2.9 + tests: link to gnulib to avoid build error related to 'rpl_ftello' on Solaris. Reported by Dagobert Michelsen + doc: fix bug reporting address to point at help-libtasn1@gnu.org + doc: fix returns: documentation in Texinfo. Reported by Jeffery Walton + build : update gnulib files - changes in version 2.8 + update gnulib files + use libtool 2.2.10 to ease MinGW64 builds - changes in version 2.7 + Doc: build PDF manual using GTK-DOC + Doc: fix of asn1_check_version, documentation was missing from last release + Build: avoid warnings about ignored visibility attributes on Windows - changes in version 2.6 + Fix build failure on platforms without support for GNU_LD version scripts + libtasn1: simplified implementation of asn1_check_version + tests: improved self-checks + update gnulib files, fix many syntax-check nits, indent code, fix license templates - changes in version 2.5 + doc: improve GTK-DOC comments + misc: updated gnulib files - changes in version 2.4 + Doc fixes + updated gnulib files + clean up copyright notices - changes in version 2.3 + libtasn1 is now an official GNU project + solve build problem on Tru64 related to TRUE/FALSE + More careful decoding of OIDs + Fixed warning in ANS1.y + Use "Software libraries" info dircategory + Drop GPL/LGPL copies from the manual (not needed there) + New configure parameters to set packagin specific information The parameters are --with-packager, --with-packager-version, and --with-packager-bug-reports. See <http://article.gmane.org/gmane.comp.lib.gnulib.bugs/17791> for more details. ------------------------------------------------------------------- Sun Oct 31 12:37:02 UTC 2010 - jengelh@medozas.de - Use %_smp_mflags ------------------------------------------------------------------- Sat Apr 24 11:38:22 UTC 2010 - coolo@novell.com - buildrequire pkg-config to fix provides ------------------------------------------------------------------- Thu Dec 17 22:48:05 CET 2009 - jengelh@medozas.de - Add baselibs.conf as a source ------------------------------------------------------------------- Thu May 21 16:03:24 CEST 2009 - vuntz@novell.com - Update to version 2.2: + Change how the ASN1_API decorator is used in libtasn1.h, for GTK-DOC. + Changed license of libtasn1.pc from GPLv3+ to LGPLv2.1+. + Building with many warning flags now requires --enable-gcc-warnings. + Some warnings fixed. - Fix license of library packages: it's LGPL not GPL. ------------------------------------------------------------------- Wed May 6 02:11:26 CEST 2009 - vuntz@novell.com - Update to version 2.1: + Fix compilation failure on platforms that can't generate empty archives, e.g., Mac OS X. - Changes from version 2.0: + Optimized tree generation. + ASN1 parser code re-generated using Bison 2.4.1. + Build with more warning flags. Many compiler warnings fixed. + Compiled with -fvisibility=hidden by default if supported. See http://gcc.gnu.org/wiki/Visibility + The libtasn1-config tool has been removed. For application developers, please stop using libtasn1-config for finding libtasn1, use proper autoconf checks or pkg-config instead. - Remove AutoReqProv: it's default now. - Pass --disable-static to configure. ------------------------------------------------------------------- Wed Feb 11 20:46:06 CET 2009 - ro@suse.de - added baselibs.conf (needed by gnome-keyring-32bit) ------------------------------------------------------------------- Sun Feb 1 18:05:12 EST 2009 - mboman@suse.de - Update to version 1.8: + Fix crlf self-test under Mingw+Wine. + Fix build problems on platforms that lack stdint.h. ------------------------------------------------------------------- Sat Dec 20 11:34:23 EST 2008 - mboman@suse.de - Update to version 1.7: + Add libtasn1-config for compatibility. Please stop use it as it will disappear in v2.0! Use standard AC_CHECK_FUNCS autoconf tests or pkg-config instead. + Read PKCS#12 blob as binary file, fixes self-tests under Mingw. + Fix use of __attribute__ ((deprecated)) to work on non-GCC + Fixed namespace violation for MAX_NAME_SIZE and MAX_ERROR_DESCRIPTION_SIZE. The new names are ASN1_MAX_NAME_SIZE and ASN1_MAX_ERROR_DESCRIPTION_SIZE. + Fixed namespace violation for libtasn1_perror and libtasn1_strerror. The new names are asn1_perror and asn1_strerror. + Fix namespace violation for LIBASN1_VERSION. The new name is ASN1_VERSION. + Decoder can now decode BER encoded octet strings. + doc: Change license on the manual to GFDLv1.3+. + doc: Sync gdoc script with GnuTLS, changes license on man-pages to GAP. + doc: Improve gtk-doc manual. + Assumes system has strdup and string.h. + Remove libtasn1-config and libtasn1.m4, use standard AC_CHECK_FUNCS autoconf tests or pkg-config instead. + Change detection of when to use a linker version script, use --enable-ld-version-script or --disable-ld-version-script to override auto-detection logic. + API and ABI changes since last version: asn1_get_length_ber: New function. ASN1_VERSION: New symbol, replaces LIBTASN1_VERSION. asn1_strerror: New function, replaces libtasn1_strerror. asn1_perror: New function, replaces libtasn1_perror. libtasn1_strerror: Marked as deprecated. libtasn1_perror: Marked as deprecated. LIBTASN1_VERSION: Deprecated. ------------------------------------------------------------------- Fri Sep 12 07:30:10 CDT 2008 - maw@suse.de - Update to version 1.5: + Update gnulib files + Handle 'INTEGER { ... } (a..b)' regression Revert parts of earlier fix. asn1Parser can now again parse src/pkix.asn1. The ASN1.c file was generated using Bison 2.3. + Move examples from src/ to new directory examples/. + Duplicate copy of divergated pkix.asn removed. + Merge unnecessary lib/defines.h into lib/int.h. + Misc. fixes. ------------------------------------------------------------------- Wed Jan 2 20:37:16 CET 2008 - maw@suse.de - Add a %clean section. ------------------------------------------------------------------- Thu Dec 20 13:21:18 CST 2007 - maw@suse.de - Properly package info files - Package several documentation files. ------------------------------------------------------------------- Thu Dec 20 12:42:17 CST 2007 - maw@suse.de - New package, version 1.2.
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
