ALT-PU-2026-10784: package python3-module-pyasn1 update to version 0.6.4-alt1
Описание
This update upgrades python3-module-pyasn1 to version 0.6.4-alt1.
Устраненные уязвимости6
Ссылки4
GHSA-8ppf-4f7h-5ppj
https://github.com/advisories/GHSA-8ppf-4f7h-5ppjGHSA-hm4w-wwcw-mr6r
https://github.com/advisories/GHSA-hm4w-wwcw-mr6rGHSA-m4p7-r5rc-7g4j
https://github.com/advisories/GHSA-m4p7-r5rc-7g4jСвязанные уязвимости
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.