public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Simon Pichugin <spichugi@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/python-pyasn1] f43: Update to 0.6.4
Date: Thu, 16 Jul 2026 02:00:37 GMT	[thread overview]
Message-ID: <178416723761.1.17014524644541895701.rpms-python-pyasn1-a31083b96730@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/python-pyasn1
            Branch : f43
            Commit : a31083b96730c110a937cd10f49dd7688a2b8b50
            Author : Simon Pichugin <spichugi@redhat.com>
            Date   : 2026-07-15T18:41:43-07:00
            Stats  : +11/-3 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/python-pyasn1/c/a31083b96730c110a937cd10f49dd7688a2b8b50?branch=f43

            Log:
            Update to 0.6.4

Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
Fixed excessive resource use in Real.__float__() (CVE-2026-59886)

Resolves: bz#2501243

---
diff --git a/.gitignore b/.gitignore
index 93012df..8dc7b0c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -31,3 +31,5 @@ pyasn1-0.0.9a.tar.gz
 /v0.6.1.tar.gz
 /v0.4.1.tar.gz
 /v0.6.2.tar.gz
+/v0.4.2.tar.gz
+/v0.6.4.tar.gz

diff --git a/python-pyasn1.spec b/python-pyasn1.spec
index 12ba91c..a8d4499 100644
--- a/python-pyasn1.spec
+++ b/python-pyasn1.spec
@@ -2,7 +2,7 @@
 %global modules_version 0.4.1
 
 Name:           python-pyasn1
-Version:        0.6.2
+Version:        0.6.4
 Release:        1%{?dist}
 Summary:        ASN.1 tools for Python
 License:        BSD-2-Clause
@@ -83,6 +83,12 @@ popd
 %doc docs/build/html/*
 
 %changelog
+* Thu Jul 16 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.4-1
+- Update to 0.6.4
+- Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
+- Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
+- Fixed excessive resource use in Real.__float__() (CVE-2026-59886)
+
 * Thu Feb 05 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.2-1
 - Update to 0.6.2
 - Fixed continuation octet limits in OID/RELATIVE-OID decoder (CVE-2026-23490)

diff --git a/sources b/sources
index e87d1c2..ac86cce 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (v0.6.2.tar.gz) = 0c7d0d1ae8bcec004feede4c5fe74500729c0dca45a5f7a0650b77fd11b1c3b364babe3cac673b0f6382732fb6ccf204acceb3bbb2e2a2bf635a8830548b4a85
-SHA512 (v0.4.1.tar.gz) = 65fd2bba6bca412f0bec1f4fa51cf331d0d90aa6f2c4b8705dffc347ff7cd835473eaeb5e983de37c14ee7e01ebf5d43f7c16838a1652db263535b0a57fde8c0
+SHA512 (v0.4.2.tar.gz) = 2128b6c45132a639894dc69413613bd0ab20ba7f929f1a0b190686a607c254315d320782c1527b7c3cc1f6cb30a18dd1bc864a29576d2fd7c6bf348966321dd5
+SHA512 (v0.6.4.tar.gz) = ce04b28d42d41fc8fa20608b773bf6691b46427f73f3fc3fb1a81c06996133bd77dcb2b4f6ba8213e27222d4203adc90adf64eeb7096ec82bc7df6e2f307657d

                 reply	other threads:[~2026-07-16  2:00 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178416723761.1.17014524644541895701.rpms-python-pyasn1-a31083b96730@fedoraproject.org \
    --to=spichugi@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox