Update dependency pyasn1 to v0.6.4 - #12

v0.6.4

Compare Source

• CVE-2026-59885 (GHSA-8ppf-4f7h-5ppj): Fixed quadratic time
  complexity in the OBJECT IDENTIFIER and RELATIVE-OID decoders.
  A small crafted substrate encoding many arcs could consume
  excessive CPU. Arcs are now accumulated in linear time; decoded
  values are unchanged (thanks for reporting, tynus2)
• CVE-2026-59884 (GHSA-m4p7-r5rc-7g4j): Limited BER long-form tag
  IDs to 20 octets (140 bits), matching the OID arc limit introduced
  in 0.6.2. Unbounded tag IDs allowed a crafted substrate to consume
  excessive CPU and memory; longer tag IDs are now rejected with
  PyAsn1Error. Also fixed Tag and TagSet repr() failing on huge tag
  (thanks for reporting, mikeappsec)
  IDs due to the integer-to-string conversion limit (Python 3.11+)
• CVE-2026-59886 (GHSA-hm4w-wwcw-mr6r): Fixed excessive memory and
  CPU consumption in Real.float() for values with large base-10
  exponents. Conversion no longer materializes huge intermediate
  integers; values too large to represent as a Python float raise
  OverflowError promptly, and prettyPrint() renders them as
  '' as before. Also fixed base-10 mantissa normalization
  to use exact integer arithmetic; mantissas larger than 2**53
  could previously lose precision through float division
  (thanks for reporting, gvozdila)
• Pinned PyPI publish GitHub Action to an immutable commit
  pr #​113

v0.6.3

Compare Source

• CVE-2026-30922 (GHSA-jr27-m4p2-rc6r): Added nesting depth
  limit to ASN.1 decoder to prevent stack overflow from deeply
  nested structures (thanks for reporting, romanticpragmatism)
• Fixed OverflowError from oversized BER length field
  issue #​54
  pr #​100
• Fixed DeprecationWarning stacklevel for deprecated attributes
  issue #​86
  pr #​101
• Fixed asDateTime incorrect fractional seconds parsing
  issue #​81
  pr #​102

v0.6.2

Compare Source

• CVE-2026-23490 (GHSA-63vm-454h-vhhq): Fixed continuation octet limits
  in OID/RELATIVE-OID decoder (thanks to tsigouris007)
• Added support for Python 3.14
  pr #​97
• Added SECURITY.md policy
• Fixed unit tests failing due to missing code
  issue #​91
  pr #​92
• Migrated to pyproject.toml packaging
  pr #​90

v0.6.1

Compare Source

• Added support for Python 3.13 and updated GitHub Actions
  pr #​73
• Removed Python 2 support and related code
  pr #​62
  pr #​61
  pr #​60
• Improved error handling and consistency
  pr #​71
  pr #​70
• Runtime deprecation of tagMap and typeMap aliases
  pr #​72
• Fixed duplicated and missing declarations
  pr #​64
• Cleaned documentation and comments
  pr #​63
• Removed bdist_wheel universal flag from setup.cfg
  pr #​69

v0.6.0

Compare Source

• Added support for previously missing RELATIVE-OID construct
  pr #​48
• Updated link to Layman's Guide
  Now it provides a link to links to a formatted PDF version of the paper,
  at a stable domain (researchgate), using https
  pr #​50
• Removed support for EOL Python 2.7, 3.6, 3.7
  pr #​56