[Git][security-tracker-team/security-tracker][master] Add new pyasn1 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
70d376df by Salvatore Bonaccorso at 2026-10-30T08:36:24+01:00
Add new pyasn1 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -183,13 +183,21 @@ CVE-2026-119199 (Nuxt is an open-source web development framework for Vue.js. Fr
 CVE-2026-119198 (Nuxt is an open-source web development framework for Vue.js. From 4.6. ...)
 	TODO: check
 CVE-2026-119197 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary R ...)
-	TODO: check
+	- pyasn1 <unfixed>
+	NOTE: https://github.com/pyasn1/pyasn1/security/advisories/GHSA-mm57-4v3p-rchx
+	NOTE: Fixed by: https://github.com/pyasn1/pyasn1/commit/ce3ec3390784780a530047e0e77be5ff457636a4 (v0.6.5)
 CVE-2026-119196 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, construc ...)
-	TODO: check
+	- pyasn1 <unfixed>
+	NOTE: https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5
+	NOTE: Fixed by: https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c (v0.6.5)
 CVE-2026-119195 (pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, construc ...)
-	TODO: check
+	- pyasn1 <unfixed>
+	NOTE: https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39
+	NOTE: Fxied by: https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9 (v0.6.5)
 CVE-2026-119194 (pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5,  ...)
-	TODO: check
+	- pyasn1 <unfixed>
+	NOTE: https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p
+	NOTE: Fixed by: https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86 (v0.6.5)
 CVE-2026-119193 (PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the  ...)
 	TODO: check
 CVE-2026-119191 (Forge (also called node-forge) is a native implementation of Transport ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/70d376df12adc64da4427d83f38781ed5e7f85ce

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/70d376df12adc64da4427d83f38781ed5e7f85ce
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/b38fb644/attachment-0001.htm>