public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/python-pyasn1] rawhide: Update to 0.6.4
@ 2026-07-10  5:05 Simon Pichugin
  0 siblings, 0 replies; only message in thread
From: Simon Pichugin @ 2026-07-10  5:05 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/python-pyasn1
            Branch : rawhide
            Commit : 265829544f62e5445b001189fc460ea68694d050
            Author : Simon Pichugin <spichugi@redhat.com>
            Date   : 2026-07-09T22:04:50-07:00
            Stats  : +10/-3 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/python-pyasn1/c/265829544f62e5445b001189fc460ea68694d050?branch=rawhide

            Log:
            Update to 0.6.4

Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
Fixed excessive resource use in Real.__float__() (CVE-2026-59886)

Resolves: bz#2498383

---
diff --git a/.gitignore b/.gitignore
index 3c28fea..0d6a904 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,3 +33,4 @@ pyasn1-0.0.9a.tar.gz
 /v0.6.2.tar.gz
 /v0.4.2.tar.gz
 /v0.6.3.tar.gz
+/v0.6.4.tar.gz

diff --git a/python-pyasn1.spec b/python-pyasn1.spec
index 2643325..c71afe8 100644
--- a/python-pyasn1.spec
+++ b/python-pyasn1.spec
@@ -2,8 +2,8 @@
 %global modules_version 0.4.2
 
 Name:           python-pyasn1
-Version:        0.6.3
-Release:        2%{?dist}
+Version:        0.6.4
+Release:        1%{?dist}
 Summary:        ASN.1 tools for Python
 License:        BSD-2-Clause
 Source0:        https://github.com/pyasn1/pyasn1/archive/v%{version}.tar.gz
@@ -83,6 +83,12 @@ popd
 %doc docs/build/html/*
 
 %changelog
+* Fri Jul 10 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.4-1
+- Update to 0.6.4
+- Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
+- Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
+- Fixed excessive resource use in Real.__float__() (CVE-2026-59886)
+
 * Wed Jun 03 2026 Python Maint <python-maint@redhat.com> - 0.6.3-2
 - Rebuilt for Python 3.15
 

diff --git a/sources b/sources
index c950a4b..ac86cce 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (v0.4.2.tar.gz) = 2128b6c45132a639894dc69413613bd0ab20ba7f929f1a0b190686a607c254315d320782c1527b7c3cc1f6cb30a18dd1bc864a29576d2fd7c6bf348966321dd5
-SHA512 (v0.6.3.tar.gz) = c58962b3f11f486da3e73c09dbe2aff7500879b29c4a7be4295878e4edbcaaa2680d608720ad5af86a2457de7da50471ab7a9e925f717db5c467553fc552e6d6
+SHA512 (v0.6.4.tar.gz) = ce04b28d42d41fc8fa20608b773bf6691b46427f73f3fc3fb1a81c06996133bd77dcb2b4f6ba8213e27222d4203adc90adf64eeb7096ec82bc7df6e2f307657d

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-07-10  5:05 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-10  5:05 [rpms/python-pyasn1] rawhide: Update to 0.6.4 Simon Pichugin

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox