SUSE-SU-2026:23006-1 Security update for python-pyasn1

This update for python-pyasn1 fixes the following issues: This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs bsc1271464. - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, request-1276, wazuh-manager-fips, barman, wazuh-manager, kubeflow, duplicity, k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-pipelines, openstack-keystone-2025.1-fips, openstack-keystone-2025.2-fips, litellm, localstack, superset,...

Linux Distros Unpatched Vulnerability : CVE-2026-59885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time...

a2grunnerp (>=0.1.0, <=0.1.8), acltoolkit-ad (0.2.2) +984 more potentially affected by CVE-2026-59885 via pyasn1 (>=0.1.7, <=0.6.3)

pyasn1 PYPI version =0.1.7, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.4.0rc1, =0.0.2, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.1.0, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-59885 Source advisory: SNYK:PYTHON-PYASN1-17972380...