public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/python-pyasn1] f44: Update to 0.6.4
@ 2026-07-16  1:59 Simon Pichugin
  0 siblings, 0 replies; only message in thread
From: Simon Pichugin @ 2026-07-16  1:59 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/python-pyasn1
            Branch : f44
            Commit : 3f9da6bebb5ca2589fe028eb89366a7159745a8d
            Author : Simon Pichugin <spichugi@redhat.com>
            Date   : 2026-07-15T18:40:37-07:00
            Stats  : +11/-3 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/python-pyasn1/c/3f9da6bebb5ca2589fe028eb89366a7159745a8d?branch=f44

            Log:
            Update to 0.6.4

Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
Fixed excessive resource use in Real.__float__() (CVE-2026-59886)

Resolves: bz#2501242

---
diff --git a/.gitignore b/.gitignore
index 93012df..8dc7b0c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -31,3 +31,5 @@ pyasn1-0.0.9a.tar.gz
 /v0.6.1.tar.gz
 /v0.4.1.tar.gz
 /v0.6.2.tar.gz
+/v0.4.2.tar.gz
+/v0.6.4.tar.gz

diff --git a/python-pyasn1.spec b/python-pyasn1.spec
index 4aaa94d..030ea10 100644
--- a/python-pyasn1.spec
+++ b/python-pyasn1.spec
@@ -2,7 +2,7 @@
 %global modules_version 0.4.1
 
 Name:           python-pyasn1
-Version:        0.6.2
+Version:        0.6.4
 Release:        1%{?dist}
 Summary:        ASN.1 tools for Python
 License:        BSD-2-Clause
@@ -83,6 +83,12 @@ popd
 %doc docs/build/html/*
 
 %changelog
+* Thu Jul 16 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.4-1
+- Update to 0.6.4
+- Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
+- Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
+- Fixed excessive resource use in Real.__float__() (CVE-2026-59886)
+
 * Fri Jan 16 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.2-1
 - Update to 0.6.2
 - Fixed continuation octet limits in OID/RELATIVE-OID decoder (CVE-2026-23490)

diff --git a/sources b/sources
index e87d1c2..ac86cce 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (v0.6.2.tar.gz) = 0c7d0d1ae8bcec004feede4c5fe74500729c0dca45a5f7a0650b77fd11b1c3b364babe3cac673b0f6382732fb6ccf204acceb3bbb2e2a2bf635a8830548b4a85
-SHA512 (v0.4.1.tar.gz) = 65fd2bba6bca412f0bec1f4fa51cf331d0d90aa6f2c4b8705dffc347ff7cd835473eaeb5e983de37c14ee7e01ebf5d43f7c16838a1652db263535b0a57fde8c0
+SHA512 (v0.4.2.tar.gz) = 2128b6c45132a639894dc69413613bd0ab20ba7f929f1a0b190686a607c254315d320782c1527b7c3cc1f6cb30a18dd1bc864a29576d2fd7c6bf348966321dd5
+SHA512 (v0.6.4.tar.gz) = ce04b28d42d41fc8fa20608b773bf6691b46427f73f3fc3fb1a81c06996133bd77dcb2b4f6ba8213e27222d4203adc90adf64eeb7096ec82bc7df6e2f307657d

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-07-16  1:59 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-16  1:59 [rpms/python-pyasn1] f44: Update to 0.6.4 Simon Pichugin

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox