SUSE-SU-2026:3238-1
SUSE-SU-2026:3238-1 · Security update for python-pyasn1
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service (bsc#1271465). - CVE-2026-59886: uncontrolled resource consumption when converting decoded REAL values (bsc#1271466).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
python-pyasn1 SUSE:Linux Enterprise Module for Public Cloud 15 SP4
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise Module for Python 3 15 SP7
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise Server 15 SP4-LTSS
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise Server 15 SP5-LTSS
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise Server 15 SP6-LTSS
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise Server for SAP Applications 15 SP4
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise Server for SAP Applications 15 SP5
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
python-pyasn1 SUSE:Linux Enterprise Server for SAP Applications 15 SP6
- Affected ranges
- ECOSYSTEM: < 0.5.0-150400.12.16.1
Update to 0.5.0-150400.12.16.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20263238-1/
- https://bugzilla.suse.com/1271464
- https://bugzilla.suse.com/1271465
- https://bugzilla.suse.com/1271466
- https://www.suse.com/security/cve/CVE-2026-59884
- https://www.suse.com/security/cve/CVE-2026-59885
- https://www.suse.com/security/cve/CVE-2026-59886
- https://osv.dev/vulnerability/SUSE-SU-2026:3238-1