mirror of
https://git.yoctoproject.org/poky
synced 2026-09-22 09:30:14 +00:00
Emily Vekariya
d78b160b6c
The BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size. A crafted input can force construction of an arbitrarily large integer with CPU cost growing quadratically, and can trigger unhandled ValueError exceptions in the Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. scarthgap ships pyasn1 0.5.1, which is affected as the issue is present in all versions before 0.6.4. Pick the upstream patch [1] as mentioned in [2]. [1] https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-59884 (From OE-Core rev: 75ff4b187cf1b5e4e874cab8273ea84377b3c873) Signed-off-by: Emily Vekariya <evekariy@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>