From 36df5eeefa8d07d2056a7fb69ef5c90c648ca5fd Mon Sep 17 00:00:00 2001 From: Nikos Mavrogiannopoulos Date: Mon, 16 Jan 2017 18:50:29 +0100 Subject: released 4.10 --- NEWS | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/NEWS b/NEWS index 57d7e7b..65550aa 100644 --- a/NEWS +++ b/NEWS @@ -1,12 +1,16 @@ GNU Libtasn1 NEWS -*- outline -*- -* Noteworthy changes in release 4.10 (unreleased) [stable] +* Noteworthy changes in release 4.10 (released 2017-01-16) [stable] - Updated gnulib - Removed -Werror from default compiler flags -- Fixed undefined behavior when negating integers in _asn1_ltostr() +- Fixed undefined behavior when negating integers in _asn1_ltostr(). + Issue found by oss-fuzz project (via gnutls): + https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=388 - Pass the correct length to _asn1_get_indefinite_length_string in asn1_get_length_ber. This addresses reading 1-byte past the end - of data. + of data. Issue found by oss-fuzz project (via gnutls): + https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=330 + https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=331 * Noteworthy changes in release 4.9 (released 2016-07-25) [stable] - Fixes to OID encoding of OIDs which have elements which exceed 2^32 -- cgit v1.2.1