MGASA-2026-0380

    Dashboard / Vulnerabilities / MGASA-2026-0380

    MGASA-2026-0380

    Published: 7 Sept 2026Last Modified: 7 Sept 2026

    Summary: Updated python-pyasn1 packages fix security vulnerabilities

    Details: The BER decoder (shared by the CER and DER codecs) parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a ~1 MB input consumes over a minute of CPU. On Python 3.11+, the oversized tag ID can also trigger an unhandled ValueError (integer string conversion limit) while the decoder formats error messages, violating the documented PyAsn1Error contract and potentially bypassing caller error handling.

    References: https://advisories.mageia.org/MGASA-2026-0380.html, https://bugs.mageia.org/show_bug.cgi?id=36249, https://ubuntu.com/security/notices/USN-8712-1, https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j

    Affected packages

    Package

    Name: python-pyasn1

    Purl: pkg:rpm/mageia/python-pyasn1?arch=source&distro=mageia-10

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -0.6.4-1.mga10

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High