Skip to content
OpenAdvisories

Description

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4.

Affected products

VendorProductAffectedFixed
pyasn1 pyasn1 < 0.6.4 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 pyasn1 0.6.4-1 —
Debian 13 pyasn1 0.6.1-1+deb13u3 —
Debian 12 pyasn1 0.4.8-3+deb12u3 —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 pyasn1 0.6.4-1ubuntu0.1 USN-9011-1
Ubuntu 26.04 LTS pyasn1 0.6.3-1ubuntu0.1 USN-9011-1, USN-8712-1
Ubuntu 24.04 LTS pyasn1 0.4.8-4ubuntu0.3 USN-9011-1, USN-8712-1
Ubuntu 22.04 LTS pyasn1 0.4.8-1ubuntu0.3 USN-9011-1, USN-8712-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS pyasn1 0.4.2-3ubuntu0.20.04.1~esm2 USN-9011-1
Ubuntu Pro 18.04 LTS pyasn1 0.4.2-3ubuntu0.18.04.1~esm2 USN-9011-1
Ubuntu Pro 16.04 LTS pyasn1 0.1.9-1ubuntu0.1~esm2 USN-9011-1
Ubuntu Pro 14.04 LTS pyasn1 0.1.7-1ubuntu2.1+esm2 USN-9011-1
ReleasePackageFixed inAdvisory
RHEL 10 python-pyasn1 +2 0.6.2-1.el10_2.1 RHSA-2026:59243
RHEL 9 fence-virt +56 4.10.0-110.el9_8.6 RHSA-2026:53365
RHEL 9 python-pyasn1 +2 0.4.8-7.el9_8.1 RHSA-2026:59242
RHEL 8 fence-agents +48 4.2.1-129.el8_10.29 RHSA-2026:53363
RHEL 8 python-pyasn1 +2 0.3.7-6.el8_10.2 RHSA-2026:59241
RHEL 8 resource-agents +3 4.9.0-54.el8_10.37 RHSA-2026:53364
RHEL 7 resource-agents +2 4.1.1-61.el7_9.24 RHSA-2026:59329
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Sap Hana Els 7 resource-agents +1 4.1.1-61.el7_9.24 RHSA-2026:59329
Red Hat Rhel Extras Sap Hana Els 7 resource-agents-sap-hana-scaleout 0.164.0-6.el7_9.24 RHSA-2026:59329
Red Hat Rhel Extras Sap Els 7 resource-agents +1 4.1.1-61.el7_9.24 RHSA-2026:59329
Red Hat Rhel Extras Sap Els 7 sap-cluster-connector 3.0.1-37.el7_9.24 RHSA-2026:59329
RHEL 10.0 EUS python-pyasn1 +2 0.6.2-1.el10_0.2 RHSA-2026:59238
RHEL 9.6 EUS fence-virt +56 4.10.0-86.el9_6.21 RHSA-2026:58548
RHEL 9.6 EUS python-pyasn1 +2 0.4.8-6.el9_6.2 RHSA-2026:59247
RHEL 9.4 E4S fence-virt +56 4.10.0-62.el9_4.29 RHSA-2026:58547
RHEL 9.4 E4S python-pyasn1 +2 0.4.8-6.el9_4.2 RHSA-2026:59244
RHEL 9.2 E4S fence-virt +56 4.10.0-43.el9_2.25 RHSA-2026:58546
RHEL 9.2 E4S python-pyasn1 +2 0.4.8-6.el9_2.2 RHSA-2026:59239
RHEL 8.8 TUS fence-agents +46 4.2.1-112.el8_8.21 RHSA-2026:58822
RHEL 8.8 TUS python-pyasn1 +2 0.3.7-6.el8_8.2 RHSA-2026:59245
RHEL 8.8 TUS resource-agents +3 4.9.0-40.el8_8.21 RHSA-2026:58811
RHEL 8.8 E4S fence-agents +47 4.2.1-112.el8_8.21 RHSA-2026:58822
RHEL 8.8 E4S python-pyasn1 +2 0.3.7-6.el8_8.2 RHSA-2026:59245
RHEL 8.8 E4S resource-agents +3 4.9.0-40.el8_8.21 RHSA-2026:58811
RHEL 8.6 EUS Long Life fence-agents +46 4.2.1-89.el8_6.26 RHSA-2026:58835
RHEL 8.6 EUS Long Life python-pyasn1 +2 0.3.7-6.el8_6.2 RHSA-2026:59246
RHEL 8.6 EUS Long Life resource-agents +3 4.9.0-16.el8_6.24 RHSA-2026:58834
RHEL 8.6 AUS fence-agents +42 4.2.1-89.el8_6.26 RHSA-2026:58835
RHEL 8.6 AUS python-pyasn1 +2 0.3.7-6.el8_6.2 RHSA-2026:59246
RHEL 8.4 EUS Long Life fence-agents +42 4.2.1-65.el8_4.32 RHSA-2026:58821
RHEL 8.4 EUS Long Life python-pyasn1 +2 0.3.7-6.el8_4.2 RHSA-2026:59248
RHEL 8.4 EUS Long Life resource-agents +2 4.1.1-90.el8_4.27 RHSA-2026:58820
RHEL 8.4 AUS fence-agents +46 4.2.1-65.el8_4.32 RHSA-2026:58821
RHEL 8.4 AUS python-pyasn1 +2 0.3.7-6.el8_4.2 RHSA-2026:59248
RHEL 8.4 AUS resource-agents +2 4.1.1-90.el8_4.27 RHSA-2026:58820
RHEL 7 ELS python-pyasn1 +2 0.1.9-7.el7_9.3 RHSA-2026:59240
Red Hat Hardened Images 1 mariadb +20 3:11.8.8-3.hum1 RHSA-2026:37094
Red Hat Ansible Automation Platform Inside 2 receptor +1 1.6.7-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform Developer 2 automation-controller 4.7.15-2.el9ap RHSA-2026:50336
Red Hat Ansible Automation Platform Developer 2 automation-controller-cli 4.6.32-1.el8ap RHSA-2026:59136, RHSA-2026:59135, RHSA-2026:50336
Red Hat Ansible Automation Platform Developer 2 python-django +1 5.2.17-1.el10ap RHSA-2026:59136
Red Hat Ansible Automation Platform Developer 2 python3.12-django 5.2.17-1.el8ap RHSA-2026:59136, RHSA-2026:59135
Red Hat Ansible Automation Platform Developer 2 receptor +1 1.6.7-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 automation-controller +2 4.7.15-2.el9ap RHSA-2026:50336
Red Hat Ansible Automation Platform 2 automation-controller-cli 4.6.32-1.el8ap RHSA-2026:59136, RHSA-2026:59135, RHSA-2026:50336
Red Hat Ansible Automation Platform 2 automation-controller-venv-tower 4.6.31-1.el8ap RHSA-2026:59136, RHSA-2026:59135, RHSA-2026:50336
Red Hat Ansible Automation Platform 2 automation-eda-controller +4 1.1.21-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 automation-gateway-proxy +1 2.5.10-7.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 automation-gateway-server 2.5.20260824-1.el8ap RHSA-2026:59135
Red Hat Ansible Automation Platform 2 automation-platform-ui 2.6.13-1.el9ap RHSA-2026:59136
Red Hat Ansible Automation Platform 2 python-django +1 5.2.17-1.el10ap RHSA-2026:59136
Red Hat Ansible Automation Platform 2 python3.12-aiohttp 3.14.1-2.el8ap RHSA-2026:59136, RHSA-2026:59135, RHSA-2026:50336
Red Hat Ansible Automation Platform 2 python3.12-daphne 4.2.2-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 python3.12-django 5.2.17-1.el8ap RHSA-2026:59136, RHSA-2026:59135
Red Hat Ansible Automation Platform 2 python3.12-gitpython 3.1.59-1.el8ap RHSA-2026:59136, RHSA-2026:59135
Red Hat Ansible Automation Platform 2 python3.12-pillow 12.3.0-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 python3.12-pyasn1 0.6.4-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 receptor +1 1.6.7-1.el8ap RHSA-2026:50336, RHSA-2026:50319

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 python3-pyasn1 +1 0.6.2-1.el10_2.1 ALSA-2026:59243
AlmaLinux 9 fence-virt +55 4.10.0-110.el9_8.6 ALSA-2026:53365
AlmaLinux 9 python3-pyasn1 +1 0.4.8-7.el9_8.1 ALSA-2026:59242
AlmaLinux 8 fence-agents-all +47 4.2.1-129.el8_10.29 ALSA-2026:53363
AlmaLinux 8 python3-pyasn1 +1 0.3.7-6.el8_10.2 ALSA-2026:59241
AlmaLinux 8 resource-agents +3 4.9.0-54.el8_10.37.alma.1 ALSA-2026:53364

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 python-pyasn1 0.6.2-1.el10_2.1 RLSA-2026:59243
Rocky Linux 9 fence-agents 4.10.0-110.el9_8.6 RLSA-2026:53365
Rocky Linux 9 python-pyasn1 0.4.8-7.el9_8.1 RLSA-2026:59242
Rocky Linux 8 fence-agents 4.2.1-129.el8_10.29 RLSA-2026:53363
Rocky Linux 8 python-pyasn1 0.3.7-6.el8_10.2 RLSA-2026:59241
Rocky Linux 8 resource-agents 4.9.0-54.el8_10.37 RLSA-2026:53364
ReleasePackageFixed inAdvisory
SLES 15 SP6 python-pyasn1 0.5.0-150400.12.16.1 SUSE-SU-2026:3238-1
SLES 15 SP5 python-pyasn1 0.5.0-150400.12.16.1 SUSE-SU-2026:3238-1
SLES 15 SP4 python-pyasn1 0.5.0-150400.12.16.1 SUSE-SU-2026:3238-1
SLES 3 python-pyasn1 0.5.0-150400.12.16.1 SUSE-SU-2026:3238-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 python-pyasn1 0.6.1-160000.5.1 SUSE-SU-2026:22830-1
SLES for SAP 15 SP6 python-pyasn1 0.5.0-150400.12.16.1 SUSE-SU-2026:3238-1
SLES for SAP 15 SP5 python-pyasn1 0.5.0-150400.12.16.1 SUSE-SU-2026:3238-1
SLES for SAP 15 SP4 python-pyasn1 0.5.0-150400.12.16.1 SUSE-SU-2026:3238-1
SLES 16.0 python-pyasn1 0.6.1-160000.5.1 SUSE-SU-2026:22830-1
SLE Micro 6.2 python-pyasn1 0.6.1-160000.5.1 SUSE-SU-2026:22765-1
SLE Micro 6.1 python-pyasn1 0.5.0-slfo.1.1_4.1 SUSE-SU-2026:23167-1
SLE Micro 6.0 python-pyasn1 0.5.0-5.1 SUSE-SU-2026:23006-1
SLE HPC 15 SP5 python-pyasn1 0.5.0-150400.12.16.1 SUSE-SU-2026:3238-1
SLE HPC 15 SP4 python-pyasn1 0.5.0-150400.12.16.1 SUSE-SU-2026:3238-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-pyasn1 0.6.4-1.1 openSUSE-SU-2026:11318-1
openSUSE Leap 16.0 python-pyasn1 0.6.1-160000.5.1 openSUSE-SU-2026:21392-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3-pyasn1 +2 0.4.8-4.amzn2023.0.5 ALAS2023-2026-2000
Amazon Linux 2 python2-pyasn1 +3 0.1.9-7.amzn2.0.5 ALAS2-2026-3836

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 python-pyasn1 0.4.8-3 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 python3-pyasn1 +1 0.6.2-1.el10_2.1 ELSA-2026-59243
Oracle Linux 9 fence-virt +54 4.10.0-110.el9_8.6 ELSA-2026-53365
Oracle Linux 9 python3-pyasn1 +1 0.4.8-7.el9_8.1 ELSA-2026-59242
Oracle Linux 8 fence-agents-all +41 4.2.1-129.el8_10.29 ELSA-2026-53363
Oracle Linux 8 python3-pyasn1 +1 0.3.7-6.el8_10.2 ELSA-2026-59241
Oracle Linux 8 resource-agents 4.9.0-54.el8_10.37 ELSA-2026-53364
Oracle Linux 7 python2-pyasn1 +1 0.1.9-7.0.3.el7 ELSA-2026-59240

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling airflow-3 3.3.0-r4 —
Wolfi rolling datadog-agent-7.72-core-integrations No fix yet —
Wolfi rolling datadog-agent-7.73-core-integrations 7.73.3-r23 —
Wolfi rolling k8s-sidecar 2.9.0-r0 —
Wolfi rolling kserve +1 0.20.0-r7 —
Wolfi rolling kserve-storage-controller 0.19.0-r5 —
Wolfi rolling kubeflow-jupyter-web-app 1.10.0-r23 —
Wolfi rolling kubeflow-pipelines-apiserver 2.17.0-r4 —
Wolfi rolling kubeflow-pipelines-metadata-writer-compat 2.17.2-r4 —
Wolfi rolling kubeflow-pipelines-visualization-server 2.17.0-r1 —
Wolfi rolling kubeflow-profile-controller 1.10.0-r36 —
Wolfi rolling kubeflow-volumes-web-app 1.10.0-r22 —
Wolfi rolling mitmproxy 12.2.3-r4 —
Wolfi rolling py3-cassandra-medusa 0.29.1-r1 —
Wolfi rolling superset-6.0 6.0.0-r15 —
Wolfi rolling superset-6.1 6.1.0-r5 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI pyasn1 < 0.6.4 0.6.4 GHSA-hm4w-wwcw-mr6r

Advisories 50

References