UbuntuUpdates.org

Package "python-pyasn1-doc"

Name: python-pyasn1-doc

Description:

ASN.1 library for Python (documentation)
Latest version: 0.6.4-1ubuntu0.1
Release: stonking (26.10)
Level: updates
Repository: main
Head package: pyasn1
Homepage: https://pyasn1.readthedocs.io/en/latest/contents.html

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python-pyasn1-doc"

All arch deb package
APT INSTALL

Other versions of "python-pyasn1-doc" in Stonking

Repository Area Version
base main 0.6.4-1
security main 0.6.4-1ubuntu0.1

Changelog

Version: 0.6.4-1ubuntu0.1 2026-11-09 23:08:44 UTC

pyasn1 (0.6.4-1ubuntu0.1) stonking-security; urgency=medium

  * SECURITY UPDATE: DoS via quadratic binary REAL decoding
    - debian/patches/CVE-2026-119197.patch: decode the REAL mantissa in a single
      conversion in pyasn1/codec/ber/decoder.py,
      tests/codec/ber/test_decoder.py, tests/codec/cer/test_decoder.py,
      tests/codec/der/test_decoder.py.
    - CVE-2026-119197
  * SECURITY UPDATE: DoS via quadratic constructed BIT STRING decoding
    - debian/patches/CVE-2026-119196.patch: assemble constructed BIT STRING
      fragments in linear time in pyasn1/codec/ber/decoder.py,
      tests/codec/ber/test_decoder.py, tests/codec/cer/test_decoder.py,
      tests/codec/der/test_decoder.py.
    - CVE-2026-119196
  * SECURITY UPDATE: DoS via quadratic constructed string and ANY decoding
    - debian/patches/CVE-2026-119195.patch: join constructed string and ANY
      fragments only once in pyasn1/codec/ber/decoder.py,
      tests/codec/ber/test_decoder.py, tests/codec/cer/test_decoder.py,
      tests/codec/der/test_decoder.py.
    - CVE-2026-119195
  * SECURITY UPDATE: DoS via quadratic schemaless container decoding
    - debian/patches/CVE-2026-119194.patch: stop collecting tag sets once two
      distinct types are seen in pyasn1/codec/ber/decoder.py,
      tests/codec/__main__.py, tests/codec/test_decoder_schemaless.py.
    - CVE-2026-119194

 -- Charles Cochran Wed, 04 Nov 2026 14:17:48 -0600
CVE-2026-119197 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing
CVE-2026-119196 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value acc
CVE-2026-119195 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each frag
CVE-2026-119194 pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a grow


About   -   Send Feedback to @ubuntu_updates