File libtasn1.changes of Package libtasn1.2708

Overview Repositories Revisions Requests Users Attributes Meta

File libtasn1.changes of Package libtasn1.2708

-------------------------------------------------------------------
Fri Jun  3 13:07:57 UTC 2016 - meissner@suse.com

- libtasn1-CVE-2015-3622.patch: Fixed invalid read in octet string
  decoding (CVE-2015-3622, bsc#929414)
- libtasn1-CVE-2016-4008-1.patch, libtasn1-CVE-2016-4008-2.patch:
  Fixed infinite loop while parsing DER certificates (CVE-2016-4008, bsc#982779)

-------------------------------------------------------------------
Tue Jan 12 16:52:59 UTC 2016 - mgorse@suse.com

- Add libtasn1-bsc961491-value-crash.patch: only assign a value if
  the previous node had one. Fixes a crash (bsc#961491).

-------------------------------------------------------------------
Fri Apr 24 14:54:09 UTC 2015 - meissner@suse.com

- libtasn1-CVE-2015-2806.patch: fixed a two-byte stack overflow in asn1_der_decoding
  (bsc#924828 CVE-2015-2806)
- info deinstall needs to be in %preun

-------------------------------------------------------------------
Fri Jul 25 16:28:02 UTC 2014 - mgorse@suse.com

- updated to libtasn1 3.7: 
  * Noteworthy changes in release 3.7 (released 2014-06-26) [stable]
  - Fixes in length calculation in _asn1_extract_der_octet().
  - Fixes in DER decoding.
  - Fixes: CVE-2014-3468 CVE-2014-3467 CVE-2014-3469 bnc#880738
    bnc#880737 bnc#880735

-------------------------------------------------------------------
Tue Jun  3 09:20:18 UTC 2014 - meissner@suse.com

- libtasn1.keyring: added Nikos Mavrogiannopoulos <nmav@gnutls.org> 
  key, who did this release (and shares responsibility with Simon).
- updated to libtasn1 3.6
  * Noteworthy changes in release 3.6 (released 2014-05-25) [stable]
  - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735)
  - Several improvements and new safety checks on DER decoding;
    issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738,
    CVE-2014-3467/bnc#880737)
  - Marked asn1_der_decoding_element() as deprecated. Use
    asn1_der_decoding() instead.

* Noteworthy changes in release 3.5 (released 2014-05-01) [stable]
  - Correctly handle decoding of recursive CHOICE options.
  - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara.
  - Several small bug fixes found by coverity.
  - Code improvements contributed by Kurt Roeckx.

* Noteworthy changes in release 3.4 (released 2013-11-25) [stable]
  - Added asn1_delete_structure2() which allows zeroizing the contents
    of all values in the structure prior to deinitialization.
  - The parser accepts negative numbers in an INTEGER range (but
    still does no enforce them).

-------------------------------------------------------------------
Tue Jun 25 12:01:36 UTC 2013 - coolo@suse.com

- remove gpg source checking again to avoid this cycle:
  libtasn1 -> libssh2_org -> openssh -> krb5 -> python-Jinja2 -> vim -> libtasn1

-------------------------------------------------------------------
Thu Jun 20 12:36:22 UTC 2013 - meissner@suse.com

- updated to libtasn1 3.3
  * Noteworthy changes in release 3.3 (released 2013-03-23) [stable]
  - More precise overflow checks using gnulib's intprops module.
  - Updates to compile in Android systems.

* Noteworthy changes in release 3.2 (released 2012-11-30) [stable]
  - Corrected buffer overflow in the error reporting of the parser (reported
    by Andreas Metzler).

* Noteworthy changes in release 3.1 (released 2012-11-24) [stable]
  - Completed rename of types:
    ASN1_ARRAY_TYPE -> asn1_static_node (was asn1_static_node_t)
  - Added new types: VisibleString, NumericString, IA5String, TeletexString,
    PrintableString, UniversalString, BMPString, UTF8String. When re-defined
    a warning is being print instead of failing.
  - Parser outputs more detailed syntax error messages.
  - Added asn1_decode_simple_der() and asn1_encode_simple_der().
  - Added asn1_read_value_type() to return value and type.
  - Introduced ASN1_ETYPE_UTC_TIME and ASN1_ETYPE_GENERALIZED_TIME
- added gpg source checking

-------------------------------------------------------------------
Sat Nov 17 22:17:09 UTC 2012 - andreas.stieger@gmx.de

- update to libtasn1 3.0, SONAME libtasn1.so.6
  - Added tool in tests/ to benchmark X.509 structure decoding.
  - Added asn1_read_node_value() to obtain a node's value.
  - Optimizations in internal tree allocation.
  - Optimizations in tree search.
  - libtasn1.h no longer exports internal structures.
  - Types were renamed for consistency:
    ASN1_DATA_NODE -> asn1_data_node_st
    ASN1_ARRAY_TYPE -> asn1_static_node
    ASN1_TYPE -> asn1_node
    ASN1_TYPE_EMPTY -> NULL
    static_struct_asn -> asn1_static_node_st
    node_asn_struct -> asn1_node_st
    node_asn -> asn1_node_st
    (the old types are still available as definitions)
- fix W: devel-package-with-non-devel-group

-------------------------------------------------------------------
Fri Sep 28 09:23:57 UTC 2012 - meissner@suse.com

- updated to version 2.14
  This release adds asn1_read_node_value() to obtain a node's value. This
  is to deprecate the export of the node_asn internal structure for the
  upcoming 3.x release. The ASN1_DATA_NODE type and the ASN1_ETYPE_*
  constants were added to support the new function.
- removed upstreamed libtasn1-stdio.h patch
- make check

-------------------------------------------------------------------
Sun Jul 22 06:25:15 UTC 2012 - aj@suse.de

- Fix build with missing gets declaration (glibc 2.16)

-------------------------------------------------------------------
Fri Jun 29 14:45:07 UTC 2012 - cfarrell@suse.com

- license update: LGPL-2.1+ and GPL-3.0
  Tools are GPL-3.0

-------------------------------------------------------------------
Sat Apr 14 17:24:30 UTC 2012 - tabraham@novell.com

- update to version 2.12
  + Cleanup license headers.
  + build: Update gnulib files.
  + Corrected DER decoding issue (reported by Matthew Hall).
    Added self check to detect the problem, see tests/Test_overflow.c.
    This problem can lead to at least remotely triggered crashes, see
    further analysis on the libtasn1 mailing list.

-------------------------------------------------------------------
Sun Jan  8 16:37:35 UTC 2012 - tabraham@novell.com

- update to version 2.11
  + qa: now builds without compiler warnings with Solaris CC
  + qa: added clang analysis. fixed cyclomatic complexity output
  + tests: added self-test of bit string functions
  + build: added windows/libtasn14win.mk rules to produce Windows
    binaries
  + build: don't hard code path to perl in doc/gdoc
  + various minor fixes

- changes in version 2.10
  + lib: small optimization, possibly working around gcc/valgrind issue
  + build: update gnulib files
  + asn1Coding: actually implement the -c parameter
  + asn1Decoding: the -c parameter serves no purpose. remove it.
  + doc: add examples to asn1Coding and ans1Decoding description

- changes in version 2.9
  + tests: link to gnulib to avoid build error related to 'rpl_ftello'
    on Solaris. Reported by Dagobert Michelsen
  + doc: fix bug reporting address to point at help-libtasn1@gnu.org
  + doc: fix returns: documentation in Texinfo. Reported by Jeffery
    Walton
  + build : update gnulib files

- changes in version 2.8
  + update gnulib files
  + use libtool 2.2.10 to ease MinGW64 builds

- changes in version 2.7
  + Doc: build PDF manual using GTK-DOC
  + Doc: fix of asn1_check_version, documentation was missing from
    last release
  + Build: avoid warnings about ignored visibility attributes on
    Windows

- changes in version 2.6
  + Fix build failure on platforms without support for GNU_LD
    version scripts
  + libtasn1: simplified implementation of asn1_check_version
  + tests: improved self-checks
  + update gnulib files, fix many syntax-check nits, indent code,
    fix license templates

- changes in version 2.5
  + doc: improve GTK-DOC comments
  + misc: updated gnulib files

- changes in version 2.4
  + Doc fixes
  + updated gnulib files
  + clean up copyright notices

- changes in version 2.3
  + libtasn1 is now an official GNU project
  + solve build problem on Tru64 related to TRUE/FALSE
  + More careful decoding of OIDs
  + Fixed warning in ANS1.y
  + Use "Software libraries" info dircategory
  + Drop GPL/LGPL copies from the manual (not needed there)
  + New configure parameters to set packagin specific information
    The parameters are --with-packager, --with-packager-version,
    and --with-packager-bug-reports. See
    <http://article.gmane.org/gmane.comp.lib.gnulib.bugs/17791> for 
    more details.

-------------------------------------------------------------------
Sun Oct 31 12:37:02 UTC 2010 - jengelh@medozas.de

- Use %_smp_mflags

-------------------------------------------------------------------
Sat Apr 24 11:38:22 UTC 2010 - coolo@novell.com

- buildrequire pkg-config to fix provides

-------------------------------------------------------------------
Thu Dec 17 22:48:05 CET 2009 - jengelh@medozas.de

- Add baselibs.conf as a source

-------------------------------------------------------------------
Thu May 21 16:03:24 CEST 2009 - vuntz@novell.com

- Update to version 2.2:
  + Change how the ASN1_API decorator is used in libtasn1.h, for
    GTK-DOC.
  + Changed license of libtasn1.pc from GPLv3+ to LGPLv2.1+.
  + Building with many warning flags now requires
    --enable-gcc-warnings.
  + Some warnings fixed.
- Fix license of library packages: it's LGPL not GPL.

-------------------------------------------------------------------
Wed May  6 02:11:26 CEST 2009 - vuntz@novell.com

- Update to version 2.1:
  + Fix compilation failure on platforms that can't generate empty
    archives, e.g., Mac OS X.
- Changes from version 2.0:
  + Optimized tree generation.
  + ASN1 parser code re-generated using Bison 2.4.1.
  + Build with more warning flags.  Many compiler warnings fixed.
  + Compiled with -fvisibility=hidden by default if supported.
    See http://gcc.gnu.org/wiki/Visibility
  + The libtasn1-config tool has been removed. For application
    developers, please stop using libtasn1-config for finding
    libtasn1, use proper autoconf checks or pkg-config instead.
- Remove AutoReqProv: it's default now.
- Pass --disable-static to configure.

-------------------------------------------------------------------
Wed Feb 11 20:46:06 CET 2009 - ro@suse.de

- added baselibs.conf (needed by gnome-keyring-32bit)

-------------------------------------------------------------------
Sun Feb  1 18:05:12 EST 2009 - mboman@suse.de

- Update to version 1.8:
  + Fix crlf self-test under Mingw+Wine.
  + Fix build problems on platforms that lack stdint.h.

-------------------------------------------------------------------
Sat Dec 20 11:34:23 EST 2008 - mboman@suse.de

- Update to version 1.7:
  + Add libtasn1-config for compatibility.
    Please stop use it as it will disappear in v2.0!
    Use standard AC_CHECK_FUNCS autoconf tests or pkg-config instead.
  + Read PKCS#12 blob as binary file, fixes self-tests under Mingw.
  + Fix use of __attribute__ ((deprecated)) to work on non-GCC
  + Fixed namespace violation for MAX_NAME_SIZE and MAX_ERROR_DESCRIPTION_SIZE.
    The new names are ASN1_MAX_NAME_SIZE and ASN1_MAX_ERROR_DESCRIPTION_SIZE.
  + Fixed namespace violation for libtasn1_perror and libtasn1_strerror.
    The new names are asn1_perror and asn1_strerror.
  + Fix namespace violation for LIBASN1_VERSION.
    The new name is ASN1_VERSION.
  + Decoder can now decode BER encoded octet strings.
  + doc: Change license on the manual to GFDLv1.3+.
  + doc: Sync gdoc script with GnuTLS, changes license on man-pages to GAP.
  + doc: Improve gtk-doc manual.
  + Assumes system has strdup and string.h.
  + Remove libtasn1-config and libtasn1.m4,
    use standard AC_CHECK_FUNCS autoconf tests or pkg-config instead.
  + Change detection of when to use a linker version script,
    use --enable-ld-version-script or --disable-ld-version-script to
    override auto-detection logic.
  + API and ABI changes since last version:
    asn1_get_length_ber: New function.
    ASN1_VERSION: New symbol, replaces LIBTASN1_VERSION.
    asn1_strerror: New function, replaces libtasn1_strerror.
    asn1_perror: New function, replaces libtasn1_perror.
    libtasn1_strerror: Marked as deprecated.
    libtasn1_perror: Marked as deprecated.
    LIBTASN1_VERSION: Deprecated.

-------------------------------------------------------------------
Fri Sep 12 07:30:10 CDT 2008 - maw@suse.de

- Update to version 1.5:
  + Update gnulib files
  + Handle 'INTEGER { ... } (a..b)' regression
    Revert parts of earlier fix.  asn1Parser can now again parse
    src/pkix.asn1.
    The ASN1.c file was generated using Bison 2.3.
  + Move examples from src/ to new directory examples/.
  + Duplicate copy of divergated pkix.asn removed.
  + Merge unnecessary lib/defines.h into lib/int.h.
  + Misc. fixes.

-------------------------------------------------------------------
Wed Jan  2 20:37:16 CET 2008 - maw@suse.de

- Add a %clean section.

-------------------------------------------------------------------
Thu Dec 20 13:21:18 CST 2007 - maw@suse.de

- Properly package info files
- Package several documentation files.

-------------------------------------------------------------------
Thu Dec 20 12:42:17 CST 2007 - maw@suse.de

- New package, version 1.2.

Places

File libtasn1.changes of Package libtasn1.2708

Places