rpms/python-pyasn1
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Update to 0.6.4

Browse Source 
Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
Fixed excessive resource use in Real.__float__() (CVE-2026-59886)

Resolves: RHEL-211094
This commit is contained in:
Simon Pichugin 2026-07-15 19:04:12 -07:00
parent a4359e129a
commit a4271ac4b1
3 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
python-pyasn1.spec
View File

@ -2,7 +2,7 @@
%global modules_version 0.4.2
Name: python-pyasn1
Version: 0.6.3
Version: 0.6.4
Release: 1%{?dist}
Summary: ASN.1 tools for Python
License: BSD-2-Clause
@ -86,6 +86,13 @@ popd
%doc docs/build/html/*
%changelog
* Thu Jul 16 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.4-1
- Update to 0.6.4
- Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
- Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
- Fixed excessive resource use in Real.__float__() (CVE-2026-59886)
- Resolves: RHEL-211094
* Fri Apr 24 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.3-1
- Update to 0.6.3
- Added nesting depth limit to ASN.1 decoder (CVE-2026-30922)

2
sources
View File

@ -1,2 +1,2 @@
SHA512 (v0.4.2.tar.gz) = 7c4feab23a8c5ab72549387586894d1d53a3ad8b9d12cc5774b1d1f5192873f87da2e3525059fdda5b5884a52908ce79df274e3b75ee1f42af32e83ceb3f9167
SHA512 (v0.6.3.tar.gz) = c58962b3f11f486da3e73c09dbe2aff7500879b29c4a7be4295878e4edbcaaa2680d608720ad5af86a2457de7da50471ab7a9e925f717db5c467553fc552e6d6
SHA512 (v0.6.4.tar.gz) = ce04b28d42d41fc8fa20608b773bf6691b46427f73f3fc3fb1a81c06996133bd77dcb2b4f6ba8213e27222d4203adc90adf64eeb7096ec82bc7df6e2f307657d

2
tests/tests.yml
View File

@ -16,7 +16,7 @@
- python3-pytest
tests:
- unittests-pyasn1:
dir: "source/pyasn1-0.6.3"
dir: "source/pyasn1-0.6.4"
run: >-
rm -rf pyasn1* &&
pytest-3 tests/