Hello, I have just released libtasn1 3.6. This release fixes possible invalid memory accesses by the DER decoder found using the Codenomicon TLS test suite. The changes since the last release follow.
* Noteworthy changes in release 3.6 (released 2014-05-25) [stable] - Corrected an off-by-one error in ASN.1 DER tag decoding. - Several improvements and new safety checks on DER decoding; issues found using Codenomicon TLS test suite. - Marked asn1_der_decoding_element() as deprecated. Use asn1_der_decoding() instead. GNU Libtasn1 is a standalone library written in C for manipulating ASN.1 objects including DER/BER encoding/decoding. GNU Libtasn1 is used by GnuTLS to handle X.509 structures and by GNU Shishi to handle Kerberos V5 structures. Homepage: https://www.gnu.org/software/libtasn1/ Here are the compressed sources: ftp://ftp.gnu.org/gnu/libtasn1/libtasn1-3.6.tar.gz http://ftp.gnu.org/gnu/libtasn1/libtasn1-3.6.tar.gz Here are GPG detached signatures: ftp://ftp.gnu.org/gnu/libtasn1/libtasn1-3.6.tar.gz.sig http://ftp.gnu.org/gnu/libtasn1/libtasn1-3.6.tar.gz.sig If you need help to use Libtasn1, or want to help others, you are invited to join the help-libtasn1 mailing list, see: https://lists.gnu.org/mailman/listinfo/help-libtasn1 All manuals are available from: https://www.gnu.org/software/libtasn1/manual/ Direct links to the manual: HTML: https://www.gnu.org/software/libtasn1/manual/libtasn1.html PDF: https://www.gnu.org/software/libtasn1/manual/libtasn1.pdf Direct links to the API Reference manual: HTML: https://www.gnu.org/software/libtasn1/reference/ PDF: https://www.gnu.org/software/libtasn1/reference/libtasn1.pdf The software is cryptographically signed by the author using an OpenPGP key identified by the following information: pub 3104R/96865171 2008-05-04 [expires: 2028-04-29] uid Nikos Mavrogiannopoulos <nmav <at> gnutls.org> uid Nikos Mavrogiannopoulos <n.mavrogiannopoulos <at> gmail.com> sub 2048R/9013B842 2008-05-04 [expires: 2018-05-02] sub 2048R/1404A91D 2008-05-04 [expires: 2018-05-02] regards, Nikos
