From: Adolf Belka <adolf.belka@ipfire.org>
Date: Fri, 4 Jul 2025 16:33:00 +0000 (+0200)
Subject: libtasn1: Update to version 4.20.0 & move before gnutls
X-Git-Tag: v2.29-core197~25^2~228
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=9e9c059a1816fb7c756c7df9aab5d5898270b5f2;p=ipfire-2.x.git

libtasn1: Update to version 4.20.0 & move before gnutls

- Update from version 4.19.0 to 4.20.0
- Update of rootfile
- Move earlier in make.sh so that the library can be used by gnutls in place of the
   gnutls bundled version.
- Fix for a CVE
- Changelog
    4.20.0
	- The release tarball is now reproducible.
	- We publish a minimal source-only tarball generated by 'git archive'.
	- Update gnulib files and various build/maintenance fixes.
	- Fix CVE-2024-12133: Potential DoS in handling of numerous SEQUENCE OF or
	  SET OF elements

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/rootfiles/common/libtasn1 b/config/rootfiles/common/libtasn1
index 87fd4ce5f..fad23cf03 100644
--- a/config/rootfiles/common/libtasn1
+++ b/config/rootfiles/common/libtasn1
@@ -5,7 +5,7 @@
 #usr/lib/libtasn1.la
 #usr/lib/libtasn1.so
 usr/lib/libtasn1.so.6
-usr/lib/libtasn1.so.6.6.3
+usr/lib/libtasn1.so.6.6.4
 #usr/lib/pkgconfig/libtasn1.pc
 #usr/share/info/libtasn1.info
 #usr/share/man/man1/asn1Coding.1
diff --git a/lfs/libtasn1 b/lfs/libtasn1
index 86c436306..aeb3c8b87 100644
--- a/lfs/libtasn1
+++ b/lfs/libtasn1
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2018  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 4.19.0
+VER        = 4.20.0
 
 THISAPP    = libtasn1-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 6e8232590cd87da3bfd9182ed44eccdfbdfcc85e88d8cf19fffdb3d600e04694b77079b95bbd822d2c3fff29458ddae0f0440f9c1c19c711923a2507bd19270f
+$(DL_FILE)_BLAKE2 = 3219b48e691abd7f6f4e32164ab708bc7c29832a2a7669aa03751d4a519dffb78d5a5f94530a3f35cd6516b39400da9e634d7f46245ab934465c305a1d387561
 
 install : $(TARGET)
 
@@ -74,8 +74,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
 	$(UPDATE_AUTOMAKE)
 	cd $(DIR_APP) && ./configure \
-	                --prefix=/usr \
-	                --disable-static
+	                	--prefix=/usr \
+	                	--disable-static
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	@rm -rf $(DIR_APP)
diff --git a/make.sh b/make.sh
index 486937997..8bf452c37 100755
--- a/make.sh
+++ b/make.sh
@@ -1535,6 +1535,7 @@ build_system() {
 	lfsmake2 apr
 	lfsmake2 aprutil
 	lfsmake2 unbound
+	lfsmake2 libtasn1
 	lfsmake2 gnutls
 	lfsmake2 libuv
 	lfsmake2 liburcu
@@ -1665,7 +1666,6 @@ build_system() {
 	lfsmake2 mandoc
 	lfsmake2 efivar
 	lfsmake2 efibootmgr
-	lfsmake2 libtasn1
 	lfsmake2 p11-kit
 	lfsmake2 ca-certificates
 	lfsmake2 fireinfo