public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Simon Pichugin <spichugi@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/python-pyasn1] rawhide: Update to 0.6.4
Date: Fri, 10 Jul 2026 05:05:28 GMT	[thread overview]
Message-ID: <178365992802.1.14561935923954485314.rpms-python-pyasn1-265829544f62@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/python-pyasn1
            Branch : rawhide
            Commit : 265829544f62e5445b001189fc460ea68694d050
            Author : Simon Pichugin <spichugi@redhat.com>
            Date   : 2026-07-09T22:04:50-07:00
            Stats  : +10/-3 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/python-pyasn1/c/265829544f62e5445b001189fc460ea68694d050?branch=rawhide

            Log:
            Update to 0.6.4

Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
Fixed excessive resource use in Real.__float__() (CVE-2026-59886)

Resolves: bz#2498383

---
diff --git a/.gitignore b/.gitignore
index 3c28fea..0d6a904 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,3 +33,4 @@ pyasn1-0.0.9a.tar.gz
 /v0.6.2.tar.gz
 /v0.4.2.tar.gz
 /v0.6.3.tar.gz
+/v0.6.4.tar.gz

diff --git a/python-pyasn1.spec b/python-pyasn1.spec
index 2643325..c71afe8 100644
--- a/python-pyasn1.spec
+++ b/python-pyasn1.spec
@@ -2,8 +2,8 @@
 %global modules_version 0.4.2
 
 Name:           python-pyasn1
-Version:        0.6.3
-Release:        2%{?dist}
+Version:        0.6.4
+Release:        1%{?dist}
 Summary:        ASN.1 tools for Python
 License:        BSD-2-Clause
 Source0:        https://github.com/pyasn1/pyasn1/archive/v%{version}.tar.gz
@@ -83,6 +83,12 @@ popd
 %doc docs/build/html/*
 
 %changelog
+* Fri Jul 10 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.4-1
+- Update to 0.6.4
+- Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
+- Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
+- Fixed excessive resource use in Real.__float__() (CVE-2026-59886)
+
 * Wed Jun 03 2026 Python Maint <python-maint@redhat.com> - 0.6.3-2
 - Rebuilt for Python 3.15
 

diff --git a/sources b/sources
index c950a4b..ac86cce 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (v0.4.2.tar.gz) = 2128b6c45132a639894dc69413613bd0ab20ba7f929f1a0b190686a607c254315d320782c1527b7c3cc1f6cb30a18dd1bc864a29576d2fd7c6bf348966321dd5
-SHA512 (v0.6.3.tar.gz) = c58962b3f11f486da3e73c09dbe2aff7500879b29c4a7be4295878e4edbcaaa2680d608720ad5af86a2457de7da50471ab7a9e925f717db5c467553fc552e6d6
+SHA512 (v0.6.4.tar.gz) = ce04b28d42d41fc8fa20608b773bf6691b46427f73f3fc3fb1a81c06996133bd77dcb2b4f6ba8213e27222d4203adc90adf64eeb7096ec82bc7df6e2f307657d

                 reply	other threads:[~2026-07-10  5:05 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178365992802.1.14561935923954485314.rpms-python-pyasn1-265829544f62@fedoraproject.org \
    --to=spichugi@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox