CVE-2026-33936

CVE-2026-33936 ecdsa PyPI におけるサービス拒否 Denial of Service の脆弱性 はじめに 私は python-ecdsa において、Moderate（中程度） の深刻度の脆弱性を特定し、責任ある開示（responsible disclosure）を行いました。python-ecdsa は、先月だけで 4780 万回ダウンロード された広く使われている Python 暗号ライブラリです。 私は python-ecdsa をレビューしているときに、非常に具体的な問いを念頭に置いてこの問題を発見しました。 不正な DER...

python-ecdsa

Pure-Python ECDSA and ECDH 这是一个易于使用的 ECC（椭圆曲线密码学）实现，支持 ECDSA（椭圆曲线数字签名算法）、EdDSA（爱德华曲线数字签名算法）和 ECDH（椭圆曲线 Diffie-Hellman），完全用纯 Python 实现，并以 MIT 许可证发布。使用此库，您可以快速创建密钥对（签名密钥和验证密钥）、对消息签名并验证签名。您还可以基于交换的公钥协商出共享密钥。密钥和签名都非常短，易于处理并集成到其他协议中。 注意：此库不应在生产环境中使用，详情请参阅Security。 特性 此库为五种流行的 NIST“Suite B”GFp（ 素数域...

EulerOS 2.0 SP11 : python-ecdsa (EulerOS-SA-2026-3089)

According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...

EulerOS 2.0 SP12 : python-ecdsa (EulerOS-SA-2026-2556)

According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...

EulerOS 2.0 SP12 : python-ecdsa (EulerOS-SA-2026-2616)

According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...

Security update for python-ecdsa (moderate)

openSUSE security update: security update for python-ecdsa ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21078-1 Rating: moderate References: bsc1261009 Cross-References: CVE-2026-33936 CVSS scores: CVE-2026-33936 SUSE : 5.3...

EulerOS 2.0 SP15 : python-ecdsa (EulerOS-SA-2026-2460)

According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...

EulerOS 2.0 SP15 : python-ecdsa (EulerOS-SA-2026-2501)

According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...

SUSE-SU-2026:22158-1 Security update for python-ecdsa

This update for python-ecdsa fixes the following issue: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009...

OPENSUSE-SU-2026:21078-1 Security update for python-ecdsa

This update for python-ecdsa fixes the following issue: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009...

EulerOS 2.0 SP13 : python-ecdsa (EulerOS-SA-2026-2309)

According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...

python-ecdsa DER Parser Security Test Suite

This Python script is a security test and validation suite for the python-ecdsa library, focused on detecting potential DER Distinguished Encoding Rules parsing anomalies that may relate to CVE-2026-33936...

SUSE SLED15 / SLES15 Security Update : python-ecdsa (SUSE-SU-2026:1608-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:1608-1 advisory. - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the...

Security update for python-ecdsa

This update for python-ecdsa fixes the following issues: CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

SUSE-SU-2026:1608-1 Security update for python-ecdsa

This update for python-ecdsa fixes the following issues: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-ecdsa (SUSE-SU-2026:1436-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:1436-1 advisory. - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be rais...

Security update for python-ecdsa

This update for python-ecdsa fixes the following issues: CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

SUSE-SU-2026:1436-1 Security update for python-ecdsa

This update for python-ecdsa fixes the following issues: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009...

OESA-2026-1839 python-ecdsa security update

This is an easy-to-use implementation of ECDSA cryptography Elliptic Curve Digital Signature Algorithm, implemented purely in Python, released under the MIT license. With this library, you can quickly create keypairs signing key and verifying key, sign messages, and verify the signatures. The key...

CVE-2026-33936 affecting package python-ecdsa for versions less than 0.19.2-1

CVE-2026-33936 affecting package python-ecdsa for versions less than 0.19.2-1. An upgraded version of the package is available that resolves this issue...