Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
748b4b94 by Salvatore Bonaccorso at 2026-07-21T22:12:35+02:00
Track fixes for pyasn1 issues via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5886,15 +5886,15 @@ CVE-2026-59888 (jackson-databind contains the
general-purpose data-binding funct
NOTE: https://github.com/FasterXML/jackson-databind/pull/5974
NOTE: Fixed by:
https://github.com/FasterXML/jackson-databind/commit/c7c678360624da5bc7eed2152789fa522880db9d
(jackson-databind-2.18.8)
CVE-2026-59886 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4,
the univ ...)
- - pyasn1 <unfixed> (bug #1142388)
+ - pyasn1 0.6.4-1 (bug #1142388)
NOTE:
https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r
NOTE: Fixed by:
https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886
(v0.6.4)
CVE-2026-59885 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4,
the BER, ...)
- - pyasn1 <unfixed> (bug #1142388)
+ - pyasn1 0.6.4-1 (bug #1142388)
NOTE:
https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj
NOTE: Fixed by:
https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9
(v0.6.4)
CVE-2026-59884 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4,
the BER ...)
- - pyasn1 <unfixed> (bug #1142388)
+ - pyasn1 0.6.4-1 (bug #1142388)
NOTE:
https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j
NOTE: Fixed by:
https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5
(v0.6.4)
CVE-2026-59841 (A improper restriction of communication channel to intended
endpoints ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/748b4b94aaf9651b363b6b7faac50b9842b94a5e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/748b4b94aaf9651b363b6b7faac50b9842b94a5e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
