Views
5

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

USN-8712-1 updates `python3-pyasn1` for Ubuntu Server 24.04 LTS (noble) to address three denial-of-service vulnerabilities in ASN.1 parsing: CVE-2026-59884, CVE-2026-59885, and CVE-2026-59886.

Update Details

Security

  • Fixes a denial-of-service issue where long-form tag identifiers were not properly bounded when parsing BER, CER, or DER data (CVE-2026-59884).
  • Fixes quadratic-time processing of OBJECT IDENTIFIER and RELATIVE-OID values that could cause excessive CPU usage (CVE-2026-59885).
  • Fixes incorrect REAL value conversion that could lead to excessive CPU and memory consumption, causing denial of service (CVE-2026-59886).

Hints

  • A standard system update installs the fix.
  • For Ubuntu Server 24.04 LTS (noble), update python3-pyasn1 to 0.4.8-4ubuntu0.3.

Product Information

Vendor: Canonical

Product: Ubuntu Server

Product type: Software

Application category: Utilities

Platform: Linux

Variant: 24.04 LTS (Noble Numbat)

Version: python3-pyasn1 0.4.8-4ubuntu0.3

Vendor release date: Sep 1, 2026

Original release notes: View on vendor site

Published on updatealert.io: Sep 6, 2026

Description: Server operating system for Linux infrastructure and workloads.