[wrynose,08/15] python3-pyasn1: upgrade 0.6.2 -> 0.6.3

Message ID	20260803220157.1520377-8-peter.marko@siemens.com
State	New
Headers	show Return-Path: <peter.marko@siemens.com> ip: 185.136.64.226, mailfrom: fm-256628-20260803220251f6e92baeaf00020711-aw5kg2@rts-flowmailer.siemens.com) From: Peter Marko <peter.marko@siemens.com> To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 08/15] python3-pyasn1: upgrade 0.6.2 -> 0.6.3 Date: Tue, 4 Aug 2026 00:01:48 +0200 Message-ID: <20260803220157.1520377-8-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Feedback-ID: 519:519-256628:519-21489:flowmailer
Series	[wrynose,01/15] xserver-xorg: upgrade 21.1.22 -> 21.1.23 \| expand [wrynose,01/15] xserver-xorg: upgrade 21.1.22 -> 21.1.23 [wrynose,02/15] xserver-xorg: upgrade 21.1.23 -> 21.1.24 [wrynose,03/15] ffmpeg: upgrade 8.0.1 -> 8.0.3 [wrynose,04/15] ffmpeg: set status for CVE-2026-8461 and CVE-2026-40962 [wrynose,05/15] rsync: upgrade 3.4.1 -> 3.4.2 [wrynose,06/15] rsync: upgrade 3.4.2 -> 3.4.4 [wrynose,07/15] libsoup: patch CVE-2026-4271 [wrynose,08/15] python3-pyasn1: upgrade 0.6.2 -> 0.6.3 [wrynose,09/15] python3-pyasn1: upgrade 0.6.3 -> 0.6.4 [wrynose,10/15] diffutils: patch CVE-2026-53910 [wrynose,11/15] bison: patch CVE-2026-56389 [wrynose,12/15] ruby: upgrade 4.0.2 -> 4.0.3 [wrynose,13/15] ruby: upgrade 4.0.3 -> 4.0.5 [wrynose,14/15] xwayland: upgrade 24.1.11 -> 24.1.12 [wrynose,15/15] xwayland: upgrade 24.1.12 -> 24.1.13

Message ID

20260803220157.1520377-8-peter.marko@siemens.com

State

New

Headers

From: Peter Marko <peter.marko@siemens.com>
To: openembedded-core@lists.openembedded.org
Cc: peter.marko@siemens.com
Subject: [wrynose][PATCH 08/15] python3-pyasn1: upgrade 0.6.2 -> 0.6.3
Date: Tue,  4 Aug 2026 00:01:48 +0200
Message-ID: <20260803220157.1520377-8-peter.marko@siemens.com>
In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com>
References: <20260803220157.1520377-1-peter.marko@siemens.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Feedback-ID: 519:519-256628:519-21489:flowmailer

Series

[wrynose,01/15] xserver-xorg: upgrade 21.1.22 -> 21.1.23 | expand

Commit Message

Peter Marko Aug. 3, 2026, 10:01 p.m. UTC

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
- CVE-2026-30922 (GHSA-jr27-m4p2-rc6r): Added nesting depth limit to ASN.1
  decoder to prevent stack overflow from deeply nested structures
- Fixed OverflowError from oversized BER length field
- Fixed DeprecationWarning stacklevel for deprecated attributes
- Fixed asDateTime incorrect fractional seconds parsing

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
(From OE-Core rev: a82592f0a7d104f617f206fe0b9bcaf7f9df3efc)

Release notes:
* https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst#revision-063-released-16-03-2026
* CVE-2026-30922 (GHSA-jr27-m4p2-rc6r): Added nesting depth limit to
  ASN.1 decoder to prevent stack overflow from deeply nested structures
  (thanks for reporting, romanticpragmatism)
* Fixed OverflowError from oversized BER length field
* Fixed DeprecationWarning stacklevel for deprecated attributes
* Fixed asDateTime incorrect fractional seconds parsing

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 .../python/{python3-pyasn1_0.6.2.bb => python3-pyasn1_0.6.3.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-pyasn1_0.6.2.bb => python3-pyasn1_0.6.3.bb} (83%)

diff --git a/meta/recipes-devtools/python/python3-pyasn1_0.6.2.bb b/meta/recipes-devtools/python/python3-pyasn1_0.6.3.bb
similarity index 83%
rename from meta/recipes-devtools/python/python3-pyasn1_0.6.2.bb
rename to meta/recipes-devtools/python/python3-pyasn1_0.6.3.bb
index b44e877447..60b38c57c5 100644
--- a/meta/recipes-devtools/python/python3-pyasn1_0.6.2.bb
+++ b/meta/recipes-devtools/python/python3-pyasn1_0.6.3.bb
@@ -3,7 +3,7 @@  HOMEPAGE = "http://pyasn1.sourceforge.net/"
 LICENSE = "BSD-2-Clause"
 LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=190f79253908c986e6cacf380c3a5f6d"
 
-SRC_URI[sha256sum] = "9b59a2b25ba7e4f8197db7686c09fb33e658b98339fadb826e9512629017833b"
+SRC_URI[sha256sum] = "697a8ecd6d98891189184ca1fa05d1bb00e2f84b5977c481452050549c8a72cf"
 
 inherit pypi python_setuptools_build_meta ptest-python-pytest

[wrynose,08/15] python3-pyasn1: upgrade 0.6.2 -> 0.6.3

Commit Message

Patch