Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service (bsc#1271465). - CVE-2026-59886: uncontrolled resource consumption when converting decoded REAL values (bsc#1271466).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service (bsc#1271465). - CVE-2026-59886: uncontrolled resource consumption when converting decoded REAL values (bsc#1271466).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1271464
- https://bugzilla.suse.com/1271465
- https://bugzilla.suse.com/1271466
- https://www.suse.com/security/cve/CVE-2026-59884
- https://www.suse.com/security/cve/CVE-2026-59885
- https://www.suse.com/security/cve/CVE-2026-59886
- https://www.suse.com/support/update/announcement/2026/suse-su-202622830-1/