Compound WireCOMPOUND2 September 2026
pyasn1
TWO DECODER DOS BUGS PATCHED
USN-8712-1: pyasn1 vulnerabilities
Ubuntu patched pyasn1 for two decoder DoS bugs: long-form tag identifiers with no size bound, and OBJECT IDENTIFIER values parsed in quadratic time by arc count.
https://ubuntu.com/security/notices/USN-8712-1
#software