181 matches found
python-pyasn1 security update
0.1.9-7.0.3 - Fix CVE-2026-59886 Real float conversion Orabug: 39925524 0.1.9-7.0.1 - Fixes CVE-2026-23490 fixes potential memory exhaustion Orabug: 39060516...
AZL-112460 CVE-2026-119194 affecting package python-pyasn1 0.4.8-3
pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a growing set even though only one-versus-multiple tag types must be distinguished. Attacker-controlled BER, CER, or DER input contains many distinct long...
AZL-111533 CVE-2026-119195 affecting package python-pyasn1 0.4.8-3
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER data can use many constructed OCTET STRING or character-string fragments. DER reject...
AZL-111536 CVE-2026-119196 affecting package python-pyasn1 0.4.8-3
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts...
AZL-111539 CVE-2026-119197 affecting package python-pyasn1 0.4.8-3
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, ...
CLSA-2026-1792809177 python-pyasn1: Fix of CVE-2026-59886
CVE-2026-59886: fix DoS via crafted ASN.1 REAL values with large exponents...
EulerOS 2.0 SP11 : python-pyasn1 (EulerOS-SA-2026-4369)
According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Pyth...
EulerOS 2.0 SP13 : python-pyasn1 (EulerOS-SA-2026-4188)
According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Pyth...
EulerOS 2.0 SP13 : python-pyasn1 (EulerOS-SA-2026-4097)
According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Pyth...
EulerOS 2.0 SP11 : python-pyasn1 (EulerOS-SA-2026-4279)
According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Pyth...
EulerOS Virtualization 2.11.0 : python-pyasn1 (EulerOS-SA-2026-3553)
According to the versions of the python-pyasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory...
EulerOS Virtualization 2.11.1 : python-pyasn1 (EulerOS-SA-2026-3466)
According to the versions of the python-pyasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory...
EulerOS Virtualization 2.12.0 : python-pyasn1 (EulerOS-SA-2026-3667)
According to the versions of the python-pyasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...
EulerOS Virtualization 2.12.1 : python-pyasn1 (EulerOS-SA-2026-3613)
According to the versions of the python-pyasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...
EulerOS 2.0 SP12 : python-pyasn1 (EulerOS-SA-2026-3377)
According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by...
MGASA-2026-0380 Updated python-pyasn1 packages fix security vulnerabilities
The BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a 1 ...
Updated python-pyasn1 packages fix security vulnerabilities
The BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a 1 ...
ROS-20260902-73-0019
The vulnerability in python-pyasn1 is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...