buildroot/package/libtasn1, branch 2019.02-op-build

libtasn1: security bump to version 4.13

2018-02-08T21:11:44+00:00

CVE-2017-10790: NULL pointer dereference and crash when reading crafted input CVE-2018-6003: Stack exhaustion due to indefinite recursion during BER decoding Add license files hashes. Cc: Stefan Fröberg Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

libtasn1: security bump to version 4.12

2017-05-30T07:03:20+00:00

Fixes CVE-2017-7650: Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility. For more details, see: https://secuniaresearch.flexerasoftware.com/secunia_research/2017-11/ Or the 1.4.11 release mail (no mail about 1.4.12, but identical to 1.4.11 + a soname fix): https://lists.gnu.org/archive/html/help-libtasn1/2017-05/msg00003.html Remove 0001-configure-don-t-add-Werror-to-build-flags.patch and autoreconf as that patch is now upstream. Signed-off-by: Peter Korsgaard

boot, package: use SPDX short identifier for LGPLv2.1/LGPLv2.1+

2017-04-01T13:18:10+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for LGPLv2.1/LGPLv2.1+ is LGPL-2.1/LGPL-2.1+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/LGPLv2.1(\+)?/LGPL-2.1\1/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

boot, package: use SPDX short identifier for GPLv3/GPLv3+

2017-04-01T13:17:59+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for GPLv3/GPLv3+ is GPL-3.0/GPL-3.0+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\/GPL-3.0/g' Signed-off-by: Rahul Bedarkar Acked-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

package/libtasn1: Fix GNU Mirror Path

2017-02-06T17:59:18+00:00

Replacing ftpmirror.gnu.org with BR2_GNU_MIRROR variable Signed-off-by: Brian 'redbeard' Harrington Signed-off-by: Thomas Petazzoni

libtasn1: clarify licensing info

2016-10-22T14:45:06+00:00

The library is LGPLv2.1+, the tests and tools are GPLv3+ so clarify to avoid confusion. Signed-off-by: Gustavo Zacarias Reviewed-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

libtasn1: bump to version 4.9

2016-08-10T22:03:45+00:00

Add upstream patch to fix build failure with gcc warnings on. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libtasn1: bump to version 4.8

2016-04-13T19:40:02+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libtasn1: comma separate licenses

2015-12-15T21:04:23+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libtasn1: bump to version 4.6

2015-09-13T10:07:22+00:00

Signed-off-by: Gustavo Zacarias Reviewed-by: Vicente Olivert Riera Tested-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni