[Git][security-tracker-team/security-tracker][master] Add new pyasn1 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8a3d31a9 by Salvatore Bonaccorso at 2026-07-15T10:59:32+02:00
Add new pyasn1 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -73,11 +73,17 @@ CVE-2026-59889 (jackson-databind contains the general-purpose data-binding funct
 CVE-2026-59888 (jackson-databind contains the general-purpose data-binding functionali ...)
 	TODO: check
 CVE-2026-59886 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ ...)
-	TODO: check
+	- pyasn1 <unfixed>
+	NOTE: https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r
+	NOTE: Fixed by: https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886 (v0.6.4)
 CVE-2026-59885 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, ...)
-	TODO: check
+	- pyasn1 <unfixed>
+	NOTE: https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj
+	NOTE: Fixed by: https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9 (v0.6.4)
 CVE-2026-59884 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER  ...)
-	TODO: check
+	- pyasn1 <unfixed>
+	NOTE: https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j
+	NOTE: Fixed by: https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5 (v0.6.4)
 CVE-2026-59841 (A improper restriction of communication channel to intended endpoints  ...)
 	NOT-FOR-US: Fortinet
 CVE-2026-59840 (A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8a3d31a9fa725837ec806ca07c544c7f864e3760

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8a3d31a9fa725837ec806ca07c544c7f864e3760
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260715/0b7e0bcd/attachment.htm>