File _patchinfo of Package patchinfo.5239

<patchinfo incident="5239">
  <issue id="961491" tracker="bnc">VUL-1: libtasn1, gnutls: malformed asn1 definition causes segfault</issue>
  <issue id="929414" tracker="bnc">VUL-1: CVE-2015-3622: libtasn1, gnutls: invalid read in octet string decoding</issue>
  <issue id="982779" tracker="bnc">VUL-0: CVE-2016-4008: libtasn1: infinite loop while parsing DER certificates</issue>
  <issue id="2015-3622" tracker="cve" />
  <issue id="2016-4008" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>mgorse</packager>
  <description>This update for libtasn1 fixes the following issues:

- Malformed asn1 definitions could have caused a segmentation fault in the asn1 definition parser (bsc#961491)
- CVE-2015-3622: Fixed invalid read in octet string decoding (bsc#929414)
- CVE-2016-4008: Fixed infinite loop while parsing DER certificates (bsc#982779)

This update was imported from the SUSE:SLE-12:Update update project.</description>
  <summary>Security update for libtasn1</summary>
</patchinfo>