libtasn1: Update to version 4.20.0 & move before gnutls

- Update from version 4.19.0 to 4.20.0
- Update of rootfile
- Move earlier in make.sh so that the library can be used by gnutls in place of the
   gnutls bundled version.
- Fix for a CVE
- Changelog
    4.20.0
	- The release tarball is now reproducible.
	- We publish a minimal source-only tarball generated by 'git archive'.
	- Update gnulib files and various build/maintenance fixes.
	- Fix CVE-2024-12133: Potential DoS in handling of numerous SEQUENCE OF or
	  SET OF elements

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/rootfiles/common/libtasn1 b/config/rootfiles/common/libtasn1
index 87fd4ce5f8e3415ff4c763372ba6204e08961a6c..fad23cf03f1b66e4c6f059c8e49be359300a6aec 100644 (file)
--- a/config/rootfiles/common/libtasn1
+++ b/config/rootfiles/common/libtasn1
@@ -5,7 +5,7 @@
 #usr/lib/libtasn1.la
 #usr/lib/libtasn1.so
 usr/lib/libtasn1.so.6
-usr/lib/libtasn1.so.6.6.3
+usr/lib/libtasn1.so.6.6.4
 #usr/lib/pkgconfig/libtasn1.pc
 #usr/share/info/libtasn1.info
 #usr/share/man/man1/asn1Coding.1

diff --git a/lfs/libtasn1 b/lfs/libtasn1
index 86c4363063dd03fbb99e9a7a79b919af14618095..aeb3c8b87e04b768c8fae4d9f03e6b24817516bd 100644 (file)
--- a/lfs/libtasn1
+++ b/lfs/libtasn1
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2018  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 4.19.0
+VER        = 4.20.0
 
 THISAPP    = libtasn1-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 6e8232590cd87da3bfd9182ed44eccdfbdfcc85e88d8cf19fffdb3d600e04694b77079b95bbd822d2c3fff29458ddae0f0440f9c1c19c711923a2507bd19270f
+$(DL_FILE)_BLAKE2 = 3219b48e691abd7f6f4e32164ab708bc7c29832a2a7669aa03751d4a519dffb78d5a5f94530a3f35cd6516b39400da9e634d7f46245ab934465c305a1d387561
 
 install : $(TARGET)
 
@@ -74,8 +74,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
        $(UPDATE_AUTOMAKE)
        cd $(DIR_APP) && ./configure \
-                       --prefix=/usr \
-                       --disable-static
+                               --prefix=/usr \
+                               --disable-static
        cd $(DIR_APP) && make $(MAKETUNING)
        cd $(DIR_APP) && make install
        @rm -rf $(DIR_APP)

diff --git a/make.sh b/make.sh
index 4869379971cc0fe81b9879d5476cb60ff3b542a9..8bf452c378c4d16a5df438ebefb81cb7f6f2c880 100755 (executable)
--- a/make.sh
+++ b/make.sh
@@ -1535,6 +1535,7 @@ build_system() {
        lfsmake2 apr
        lfsmake2 aprutil
        lfsmake2 unbound
+       lfsmake2 libtasn1
        lfsmake2 gnutls
        lfsmake2 libuv
        lfsmake2 liburcu
@@ -1665,7 +1666,6 @@ build_system() {
        lfsmake2 mandoc
        lfsmake2 efivar
        lfsmake2 efibootmgr
-       lfsmake2 libtasn1
        lfsmake2 p11-kit
        lfsmake2 ca-certificates
        lfsmake2 fireinfo