Hello community, here is the log from the commit of package libtasn1 for openSUSE:Factory checked in at 2014-06-06 14:36:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libtasn1 (Old) and /work/SRC/openSUSE:Factory/.libtasn1.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libtasn1" Changes: -------- --- /work/SRC/openSUSE:Factory/libtasn1/libtasn1.changes 2013-06-25 17:15:25.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.libtasn1.new/libtasn1.changes 2014-06-06 14:36:22.000000000 +0200 @@ -1,0 +2,24 @@ +Tue Jun 3 09:20:18 UTC 2014 - meissner@suse.com + +- updated to libtasn1 3.6 + * Noteworthy changes in release 3.6 (released 2014-05-25) [stable] + - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735) + - Several improvements and new safety checks on DER decoding; + issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738, + CVE-2014-3467/bnc#880737) + - Marked asn1_der_decoding_element() as deprecated. Use + asn1_der_decoding() instead. + + * Noteworthy changes in release 3.5 (released 2014-05-01) [stable] + - Correctly handle decoding of recursive CHOICE options. + - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara. + - Several small bug fixes found by coverity. + - Code improvements contributed by Kurt Roeckx. + + * Noteworthy changes in release 3.4 (released 2013-11-25) [stable] + - Added asn1_delete_structure2() which allows zeroizing the contents + of all values in the structure prior to deinitialization. + - The parser accepts negative numbers in an INTEGER range (but + still does no enforce them). + +------------------------------------------------------------------- Old: ---- libtasn1-3.3.tar.gz libtasn1-3.3.tar.gz.sig New: ---- libtasn1-3.6.tar.gz libtasn1-3.6.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libtasn1.spec ++++++ --- /var/tmp/diff_new_pack.xKTePU/_old 2014-06-06 14:36:23.000000000 +0200 +++ /var/tmp/diff_new_pack.xKTePU/_new 2014-06-06 14:36:23.000000000 +0200 @@ -1,7 +1,7 @@ # # spec file for package libtasn1 # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ BuildRequires: info BuildRequires: pkg-config #BuildRequires: gpg-offline -Version: 3.3 +Version: 3.6 Release: 0 Url: http://ftp.gnu.org/gnu/libtasn1/ Summary: ASN.1 parsing library ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.xKTePU/_old 2014-06-06 14:36:23.000000000 +0200 +++ /var/tmp/diff_new_pack.xKTePU/_new 2014-06-06 14:36:23.000000000 +0200 @@ -1 +1,2 @@ libtasn1-6 +libtasn1-devel ++++++ libtasn1-3.3.tar.gz -> libtasn1-3.6.tar.gz ++++++ ++++ 55031 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org