From a4271ac4b14889be70dd8899eee7057d8430b952 Mon Sep 17 00:00:00 2001 From: Simon Pichugin Date: Wed, 15 Jul 2026 19:04:12 -0700 Subject: [PATCH] Update to 0.6.4 Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885) Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884) Fixed excessive resource use in Real.__float__() (CVE-2026-59886) Resolves: RHEL-211094 --- python-pyasn1.spec | 9 ++++++++- sources | 2 +- tests/tests.yml | 2 +- 3 files changed, 10 insertions(+), 3 deletions(-) diff --git a/python-pyasn1.spec b/python-pyasn1.spec index 446a110..68fa2ee 100644 --- a/python-pyasn1.spec +++ b/python-pyasn1.spec @@ -2,7 +2,7 @@ %global modules_version 0.4.2 Name: python-pyasn1 -Version: 0.6.3 +Version: 0.6.4 Release: 1%{?dist} Summary: ASN.1 tools for Python License: BSD-2-Clause @@ -86,6 +86,13 @@ popd %doc docs/build/html/* %changelog +* Thu Jul 16 2026 Simon Pichugin - 0.6.4-1 +- Update to 0.6.4 +- Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885) +- Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884) +- Fixed excessive resource use in Real.__float__() (CVE-2026-59886) +- Resolves: RHEL-211094 + * Fri Apr 24 2026 Simon Pichugin - 0.6.3-1 - Update to 0.6.3 - Added nesting depth limit to ASN.1 decoder (CVE-2026-30922) diff --git a/sources b/sources index a0d1433..aa029cd 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ SHA512 (v0.4.2.tar.gz) = 7c4feab23a8c5ab72549387586894d1d53a3ad8b9d12cc5774b1d1f5192873f87da2e3525059fdda5b5884a52908ce79df274e3b75ee1f42af32e83ceb3f9167 -SHA512 (v0.6.3.tar.gz) = c58962b3f11f486da3e73c09dbe2aff7500879b29c4a7be4295878e4edbcaaa2680d608720ad5af86a2457de7da50471ab7a9e925f717db5c467553fc552e6d6 +SHA512 (v0.6.4.tar.gz) = ce04b28d42d41fc8fa20608b773bf6691b46427f73f3fc3fb1a81c06996133bd77dcb2b4f6ba8213e27222d4203adc90adf64eeb7096ec82bc7df6e2f307657d diff --git a/tests/tests.yml b/tests/tests.yml index 2a46c4b..6dd5d2b 100644 --- a/tests/tests.yml +++ b/tests/tests.yml @@ -16,7 +16,7 @@ - python3-pytest tests: - unittests-pyasn1: - dir: "source/pyasn1-0.6.3" + dir: "source/pyasn1-0.6.4" run: >- rm -rf pyasn1* && pytest-3 tests/