-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 24 Aug 2026 17:02:31 -0300
Source: pyasn1
Binary: python-pyasn1-doc python3-pyasn1
Architecture: all
Version: 0.6.1-1+deb13u3
Distribution: trixie
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Emmanuel Arias <eamanu@debian.org>
Description:
 python-pyasn1-doc - ASN.1 library for Python (documentation)
 python3-pyasn1 - ASN.1 library for Python (Python 3 module)
Closes: 1142388
Changes:
 pyasn1 (0.6.1-1+deb13u3) trixie; urgency=high
 .
   * Team upload.
   * CVE-2026-59886: uncontrolled resource consumption when converting
     decoded real values. univ.Real convertedts  mantissa, base,
     exponens to a Python float using exact big-integer exponentiation,
     so a real value only a few bytes long could carry a very large exponent.
   * CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded
     long-form tag IDs. The BER decoder accumulated tag continuation
     octets without an upper bound, so a crafted substrate could force
     construction of an arbitrarily large integer with quadratic CPU cost
     (Closes: #1142388).
   * CVE-2026-59885: fix quadratic complexity in OBJECT IDENTIFIER and
     RELATIVE-OID decoding and encoding, which allowed denial of service
     via a small payload with many arcs.
Checksums-Sha1:
 4b10e500d6c964fbc50fb3fd7e71fed08fc190ca 8027 pyasn1_0.6.1-1+deb13u3_all-buildd.buildinfo
 a5489d78c0a53a84507439703a3669311ce410cd 138500 python-pyasn1-doc_0.6.1-1+deb13u3_all.deb
 643624feba8209bb1e1c02b126ba2e950d9e9054 70100 python3-pyasn1_0.6.1-1+deb13u3_all.deb
Checksums-Sha256:
 e7afe7fca407976cfa5dea4549c3c1937c7205e4f40a9448b3af6d79966cc7c7 8027 pyasn1_0.6.1-1+deb13u3_all-buildd.buildinfo
 c44e52e249627bf7a9225885af16e54d670b5b848db3c0f39ba5c8fd2d166407 138500 python-pyasn1-doc_0.6.1-1+deb13u3_all.deb
 1c2bb19f7ec957bba4b0a42cecf6a3523e79fb20fb042d99c921e5a038e9d979 70100 python3-pyasn1_0.6.1-1+deb13u3_all.deb
Files:
 ed07a3e243c4ae14f8f5869f2cdd404f 8027 python optional pyasn1_0.6.1-1+deb13u3_all-buildd.buildinfo
 2694efb963e32c5b7a8bad2a4f68a6f9 138500 doc optional python-pyasn1-doc_0.6.1-1+deb13u3_all.deb
 d46eb8b11a9c6003d6c2e787a5b8089f 70100 python optional python3-pyasn1_0.6.1-1+deb13u3_all.deb

-----BEGIN PGP SIGNATURE-----

iQIyBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmqcYBQACgkQN8Ugyu9d
QiQm6Q/3WJfZpd24bp/zWTTldxp6HUlc+Yp7s6ClZvVGFslqbx7GN+0s32P1zyIn
/6ZTB2Ua+JkrclgfeglNfQdRW10EHvQMH/VulJ9mB8TlN9ISSac9gIe1xoB9Pn4h
6kCdj9M4zzK3Cj5OpGCfgHanozLq+SWCTPSlNY0GCCAJ54UiDT4xvdj2WsPAVQ8V
sW//6C/KHy32WRopamSqYim0+WoT9KV7xDSUBqkEBw0zPEgBM/vYE6g1xF7b4aBf
8ycNdwpndFb1ggirrouRd3/LygOHlrrXH0Cc45lfew1xiFJdC2rDMpXyNCXzziEd
FZwk1Kjx+NYkH7zXgJUIlEtcLdZC2/hYgkYLkV5M6/ieBJYEORYbU+q7vq8mmBh1
mw1IkgWIj/JnjLz3WSuEA1ibjBdT6fXgi8nwpCoF2eCWR57Ke+4hvjxaecIP8h2I
+6zVWQgBF3UdEonVJqwTWRQqW/r/4uFnnXHy58J4xAhNQQXL5uWDY9XbUS6k56X2
mK5SynDWF0BO/p63zBZ4r8IatxuesejM6KmHKCUyX0n+KA00d/Gej2PD6SuXEpS8
D5pTbgxjmu4RGogSQ8W2kIbsOsd3nNrdCEz4CS0gh7+eQURyw1Y/o87mmH17jbJl
KPvMZ+f7kgxKk8aXRJHWLAnlmkv2piogq4LAdeWKkDw1alycXA==
=7Mfp
-----END PGP SIGNATURE-----