Summary
[0.1.9-7.0.3]
- Fix CVE-2026-59886 Real float conversion [Orabug: 39925524]
[0.1.9-7.0.1]
- Fixes CVE-2026-23490 fixes potential memory exhaustion [Orabug: 39060516]
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | python2-pyasn1 | 0:0.1.9-7.0.3.el7 |
| Oracle Linux · 7 | python2-pyasn1-modules | 0:0.1.9-7.0.3.el7 |
Vulnerabilities 1
-
High 7.5
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a…