From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bYfMH4JQCz34M5 for ; Fri, 4 Jul 2025 16:33:15 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature RSA-PSS (4096 bits)) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bYfMD0Mv2z32yn for ; Fri, 4 Jul 2025 16:33:12 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4bYfMC4JPtz28b; Fri, 4 Jul 2025 16:33:11 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1751646791; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=h/ztlNnnOQlD/c7R7nYI6h6mAYUkdblXw1TERvOXYow=; b=SzoL3TLshmri20axX16rCPSzezS/sRto0vhYwlV+w4pZAnfButlDihtZEAQUzNHG5wKyXW aNCXY5x1JmYURcDQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1751646791; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=h/ztlNnnOQlD/c7R7nYI6h6mAYUkdblXw1TERvOXYow=; b=CTXZB6admEPIKKnnFgKvu3/FhY/1GNYtqtiJyj9uIGl0l75dRUv657j6cMmbPSVZWYzgJK 5OYAr4d+O1xNgVgMrV6sQ+XIpfvfkf0I3fQbQOQUwP1fEuZs+PDTfNLYP+YwtjAnrMfcHy Cw1r4RPAeAzwEwmim6lamyF7M9BQ5RpAB4UPMlcb/11Sd9X2yoX/onpTVossGzXnLZxrM1 zSnQcnvTR/6NBXcIN5mSyc2NSTA0/1kzbOK2g24pIb6hkz2z4cXInEiRqMChmmmN8q9w2y 4iD2Hz/WhV6AOI+Ced+QWqnvy59atceDgovB3C4POynpd2WQYiZoFwXUDk8f9g== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH 2/6] libtasn1: Update to version 4.20.0 & move before gnutls Date: Fri, 4 Jul 2025 18:33:00 +0200 Message-ID: <20250704163304.589703-2-adolf.belka@ipfire.org> In-Reply-To: <20250704163304.589703-1-adolf.belka@ipfire.org> References: <20250704163304.589703-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit - Update from version 4.19.0 to 4.20.0 - Update of rootfile - Move earlier in make.sh so that the library can be used by gnutls in place of the gnutls bundled version. - Fix for a CVE - Changelog 4.20.0 - The release tarball is now reproducible. - We publish a minimal source-only tarball generated by 'git archive'. - Update gnulib files and various build/maintenance fixes. - Fix CVE-2024-12133: Potential DoS in handling of numerous SEQUENCE OF or SET OF elements Signed-off-by: Adolf Belka --- config/rootfiles/common/libtasn1 | 2 +- lfs/libtasn1 | 10 +++++----- make.sh | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/config/rootfiles/common/libtasn1 b/config/rootfiles/common/libtasn1 index 87fd4ce5f..fad23cf03 100644 --- a/config/rootfiles/common/libtasn1 +++ b/config/rootfiles/common/libtasn1 @@ -5,7 +5,7 @@ #usr/lib/libtasn1.la #usr/lib/libtasn1.so usr/lib/libtasn1.so.6 -usr/lib/libtasn1.so.6.6.3 +usr/lib/libtasn1.so.6.6.4 #usr/lib/pkgconfig/libtasn1.pc #usr/share/info/libtasn1.info #usr/share/man/man1/asn1Coding.1 diff --git a/lfs/libtasn1 b/lfs/libtasn1 index 86c436306..aeb3c8b87 100644 --- a/lfs/libtasn1 +++ b/lfs/libtasn1 @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team # +# Copyright (C) 2007-2024 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 4.19.0 +VER = 4.20.0 THISAPP = libtasn1-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 6e8232590cd87da3bfd9182ed44eccdfbdfcc85e88d8cf19fffdb3d600e04694b77079b95bbd822d2c3fff29458ddae0f0440f9c1c19c711923a2507bd19270f +$(DL_FILE)_BLAKE2 = 3219b48e691abd7f6f4e32164ab708bc7c29832a2a7669aa03751d4a519dffb78d5a5f94530a3f35cd6516b39400da9e634d7f46245ab934465c305a1d387561 install : $(TARGET) @@ -74,8 +74,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) $(UPDATE_AUTOMAKE) cd $(DIR_APP) && ./configure \ - --prefix=/usr \ - --disable-static + --prefix=/usr \ + --disable-static cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install @rm -rf $(DIR_APP) diff --git a/make.sh b/make.sh index 486937997..8bf452c37 100755 --- a/make.sh +++ b/make.sh @@ -1535,6 +1535,7 @@ build_system() { lfsmake2 apr lfsmake2 aprutil lfsmake2 unbound + lfsmake2 libtasn1 lfsmake2 gnutls lfsmake2 libuv lfsmake2 liburcu @@ -1665,7 +1666,6 @@ build_system() { lfsmake2 mandoc lfsmake2 efivar lfsmake2 efibootmgr - lfsmake2 libtasn1 lfsmake2 p11-kit lfsmake2 ca-certificates lfsmake2 fireinfo -- 2.50.0