lp:ubuntu/trusty-updates/libtasn1-6

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

11. By Marc Deslauriers on 2015-05-01

* SECURITY UPDATE: denial of service and possible code execution via
  overflow in _asn1_extract_der_octet.
  - debian/patches/CVE-2015-3622.patch: properly handle length in
    lib/decoding.c.
  - CVE-2015-3622

10. By Marc Deslauriers on 2015-04-02

* SECURITY UPDATE: denial of service and possible code execution via
  overflow in _asn1_ltostr
  - debian/patches/CVE-2015-2806.patch: introduce LTOSTR_MAX_SIZE and use
    in lib/coding.c, lib/decoding.c, lib/element.c, lib/parser_aux.c,
    lib/parser_aux.h.
  - CVE-2015-2806

9. By Marc Deslauriers on 2014-07-18

* SECURITY UPDATE: denial of service and possible code execution via
  invalid ASN.1 data
  - debian/patches/CVE-2014-3467-3468.patch: properly calculate lengths
    in lib/decoding.c.
  - CVE-2014-3467
  - CVE-2014-3468
* SECURITY UPDATE: denial of service via NULL value
  - debian/patches/CVE-2014-3469.patch: check for NULLs in lib/element.c.
  - CVE-2014-3469

8. By Andreas Metzler <email address hidden> on 2014-02-01

* Point vcs* to git.
* Add debian/upstream-signing-key.pgp (listed in
  debian/source/include-binaries) and update watchfile to check
  upstream signature.
* Add transitional packages for libtasn1-3-dev and -bin. (#730856)

7. By Andreas Metzler <email address hidden> on 2013-11-29

Upload to unstable.

6. By Andreas Metzler <email address hidden> on 2013-06-23

* Use debhelper v9 mode. This allows us to mark libtasn1-6-dbg Multi-Arch:
  same.
* Point Vcs-* to anonscm.debian.org.

5. By Andreas Metzler <email address hidden> on 2013-04-03

* libtasn1-6-dbg needs to Break/Relaces libtasn1-3-dbg. Closes: #699795
* New upstream version.

4. By Andreas Metzler <email address hidden> on 2013-02-02

* New upstream version, almost identical to 3.1 with
  20_overflow-in-parser.diff.
  + Drop 20_overflow-in-parser.diff.
* Upload to unstable. This is a leaf package, uploaded the first time to
  unstable yet and will not hurt the release.

3. By Andreas Metzler <email address hidden> on 2012-11-26

* New upstream version.
* New symbols added, bump shlibs.
* 20_overflow-in-parser.diff from upstream git fixes a possible buffer
  overflow. (Caught by testsuite on hardened build.)

2. By Andreas Metzler <email address hidden> on 2012-11-01

New upstream version, soname bumped. Change source and binary package
names (libtasn1-3to libtasn1-6* except for libtasn1-3-bin which is
renamed to libtasn1-bin).