Summary
[0.6.2-1.1]
- Fix CVE-2026-59886: prevent overflow in Real.__float__() when
converting ASN.1 Real values with large exponents
Resolves: RHEL-217904
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | python3-pyasn1 | 0:0.6.2-1.el10_2.1 |
| Oracle Linux · 10 | python3-pyasn1-modules | 0:0.6.2-1.el10_2.1 |
Vulnerabilities 1
-
High 7.5
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a…