Date: unknown
Location: lists.debian.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6114-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso January 28, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : pyasn1 CVE ID : CVE-2026-23490 Debian Bug : 1125753 It was discovered that pyasn1, a generic ASN.1 library for Python, is prone to a denial of service vulnerability, which may result in memory exhaustion from malformed OID/RELATIVE-OID with excessive continuation octets. For the oldstable distribution (bookworm), this problem has been fixed in version 0.4.8-3+deb12u1. For the stable distribution (trixie), this problem has been fixed in version 0.6.1-1+deb13u1. We recommend that you upgrade your pyasn1 packages. For the detailed security status of pyasn1 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/pyasn1 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAml6gtpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0Tmqw//XvnR86W1i1bznGrwCqgROck0GgXFua9f8dR83akm25pjJUwE0+cHmvMd M8/q5eaTfJT+UqRoccZTxhX+ByhkkXqR2JZ3WrcLBlc1wXA+sCckVXPQnGSVcs5r SEXOyCH5H8k0zyZO/12fCFP7pEQzLdPQx97yrYnIYC+cy5nvcHCZZePd10XpgHpy qwgx5m0XG2aKuWbC20O1bf0ZVd9OTDtRzJ5XeYZnBAsmov9QNa86HQR/km9OXt2H 2FBTn4LI1492QkkD+Vpph3s2rdIym7dfsb0Qwp/mTCIBdubzCzXh2WgY7Ih2uQy7 nkL4oFD8V1ujeWG0Z45mFSeAxYC70hXcMcYbhKqSnjGc0CTtR5Z2eKCEi0VbESeD zS5YWa1g7FE/surAJloryVRZRiSKNLQyn1r8miLijaA/1KISWZf6DJXQzgVeOM7I BfSaATqBuvGl8AIGEb7wo/tVtxUZw5HV3C6M+Gcq4Zb16RnydfXHluN2VgeKB9SC l/r1cLthLKhk6VtR+pr1k2cIWtMNJcKSbr6lSQkJrzvNiL8nhUCfFtOwSYhg8dJp HYq4AOaEnM6vgCE9PiUQaRIeyRUIb40NwuXAcloBqDxH4xc89mg+iTyasW6b5qvC n27EVMBnZLKBAZjhydi/ddcQT5U4BJePR6BBVfArVTS7jv3U3BU= =yld7 -----END PGP SIGNATURE-----