rpms/python-pyasn1
7
0
Fork 0
Code Issues Pull Requests Releases Activity
ASN.1 tools for Python
7 Commits 8 Branches 15 Tags 154 KiB
Diff 100%
b8c0657d9b
Go to file
RHEL Packaging Agent b8c0657d9b Fix CVE-2026-59886: denial of service in Real type __float__() 
Backport upstream commit 90d5e17 to fix CVE-2026-59886, a denial
of service vulnerability in the Real type's __float__() method.
The flaw allowed astronomically large integer materialization
via pow(). The patch rewrites __float__() to use math.ldexp()
for base-2 values, adds overflow protection for base-10 values,
fixes integer division in __normalizeBase10(), and handles zero
mantissa early. Comprehensive tests are added for BER, CER, DER
decoders and the Real type unit tests.

CVE: CVE-2026-59886
Upstream patches:
 - 90d5e17239.patch
Resolves: RHEL-217908

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-29 14:19:14 +00:00
tests re-import sources as agreed with the maintainer 2023-07-10 13:42:46 +02:00
.gitignore re-import sources as agreed with the maintainer 2023-07-10 13:42:46 +02:00
0001-Backport-commit-be353d7.patch python-pyasn1-0.3.7-6.el8_10.1 2026-02-18 15:05:34 +09:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 11:20:00 -08:00
python-pyasn1-0.3.7-CVE-2026-59886.patch Fix CVE-2026-59886: denial of service in Real type __float__() 2026-07-29 14:19:14 +00:00
python-pyasn1.spec Fix CVE-2026-59886: denial of service in Real type __float__() 2026-07-29 14:19:14 +00:00
sources Auto sync2gitlab import of python-pyasn1-0.3.7-6.el8.src.rpm 2022-05-26 13:42:29 -04:00