BSD Ports

security/py-asn1 0.6.4 NetBSD

ITU Abstract Syntax Notification for Python

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
ba958da433
License
2-clause-bsd
Categories
security, python
Package size
154.1 KiB, 1284.7 KiB installed

Description

ASN.1 tools for Python

Whenever data structures are described in some machine and programming language independent and unambiguous way, such specification is called abstract syntax, by contrast with machine/language specific methods, which are called 'concrete' or 'transfer' syntaxes.

Abstract syntaxes appear useful in networking as a tool for engineering protocols in a clear and portable way. Moreover, once a protocol is described in some abstract language, protocol parsers and builders could be automatically generated for various computing architectures/programming languages, thus saving engineers from implementing low-level transport details by hand.

Abstract Syntax Notation One (ASN.1) is a set of ITU standards defining particular implementation of abstract data description language accompanied by a collection of transfer encoding methods. Perhaps the most widely used among these data serialization methods is Basic Encoding Rules (BER) together with its derivatives (DER and CER), while Packed Encoding Rules (PER) aims at most compact data representation whilst in the wire.

In the other systems

SystemPortVersion
NetBSDsecurity/py-asn10.6.4
DragonFlydevel/py-asn12.7.0_1,1

Install

Binary package:

pkgin install py311-asn1

From pkgsrc:

cd /usr/pkgsrc/security/py-asn1 && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_640.6.4
NetBSD 10.1 aarch640.6.3
SmartOS / illumos x86_640.6.4
macOS 15 arm640.6.4

Dependencies

Run dependencies 1

Configuration

No options to configure.

Service scripts
none
Flavors
py312-asn1-0.6.4, py313-asn1-0.6.4, py314-asn1-0.6.4

Commit history 1

DateCommitCreditsLog message
ba958da433 adam py-asn1: updated to 0.6.4
0.6.4, released 08-07-2026 - CVE-2026-59885 (GHSA-8ppf-4f7h-5ppj): Fixed quadratic time complexity in the OBJECT IDENTIFIER and RELATIVE-OID decoders. A small crafted substrate encoding many arcs could consume excessive CPU. Arcs are now accumulated in linear time; decoded values are unchanged (thanks for reporting, tynus2) - CVE-2026-59884 (GHSA-m4p7-r5rc-7g4j): Limited BER long-form tag IDs to 20 octets (140 bits), matching the OID arc limit introduced in 0.6.2. Unbounded tag IDs allowed a crafted substrate to consume excessive CPU and memory; longer tag IDs are now rejected with PyAsn1Error. Also fixed Tag and TagSet repr() failing on huge tag (thanks for reporting, mikeappsec) IDs due to the integer-to-string conversion limit (Python 3.11+) …