Update to 0.6.4

Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
Fixed excessive resource use in Real.__float__() (CVE-2026-59886)

Resolves: RHEL-211095
This commit is contained in:
Simon Pichugin 2026-07-15 19:04:12 -07:00
parent e58db0c224
commit f0bffb2a22
3 changed files with 10 additions and 3 deletions

View File

@ -2,7 +2,7 @@
%global modules_version 0.4.2 %global modules_version 0.4.2
Name: python-pyasn1 Name: python-pyasn1
Version: 0.6.3 Version: 0.6.4
Release: 1%{?dist} Release: 1%{?dist}
Summary: ASN.1 tools for Python Summary: ASN.1 tools for Python
License: BSD-2-Clause License: BSD-2-Clause
@ -90,6 +90,13 @@ PYTHONPATH=%{buildroot}%{python3_sitelib} %{__python3} -m tests
%doc docs/build/html/* %doc docs/build/html/*
%changelog %changelog
* Thu Jul 16 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.4-1
- Update to 0.6.4
- Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
- Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
- Fixed excessive resource use in Real.__float__() (CVE-2026-59886)
- Resolves: RHEL-211094
* Fri Apr 24 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.3-1 * Fri Apr 24 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.3-1
- Update to 0.6.3 - Update to 0.6.3
- Update License to BSD-2-Clause to match upstream SPDX identifier - Update License to BSD-2-Clause to match upstream SPDX identifier

View File

@ -1,2 +1,2 @@
SHA512 (v0.6.3.tar.gz) = c58962b3f11f486da3e73c09dbe2aff7500879b29c4a7be4295878e4edbcaaa2680d608720ad5af86a2457de7da50471ab7a9e925f717db5c467553fc552e6d6
SHA512 (v0.4.2.tar.gz) = 7c4feab23a8c5ab72549387586894d1d53a3ad8b9d12cc5774b1d1f5192873f87da2e3525059fdda5b5884a52908ce79df274e3b75ee1f42af32e83ceb3f9167 SHA512 (v0.4.2.tar.gz) = 7c4feab23a8c5ab72549387586894d1d53a3ad8b9d12cc5774b1d1f5192873f87da2e3525059fdda5b5884a52908ce79df274e3b75ee1f42af32e83ceb3f9167
SHA512 (v0.6.4.tar.gz) = ce04b28d42d41fc8fa20608b773bf6691b46427f73f3fc3fb1a81c06996133bd77dcb2b4f6ba8213e27222d4203adc90adf64eeb7096ec82bc7df6e2f307657d

View File

@ -16,7 +16,7 @@
tests: tests:
- unittests-pyasn1: - unittests-pyasn1:
# Must match the unpacked tarball directory name from this SRPM (see sources / spec Version). # Must match the unpacked tarball directory name from this SRPM (see sources / spec Version).
dir: "source/pyasn1-0.6.3" dir: "source/pyasn1-0.6.4"
run: >- run: >-
rm -rf pyasn1 && rm -rf pyasn1 &&
python3 -m tests python3 -m tests