Skip to content
OpenAdvisories
High ALAS2-2026-3148 1 CVE

Important: python-pyasn1 security update (Amazon Linux 2)

Published Feb 5, 2026 · Updated Feb 5, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-23490: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 python2-pyasn1 0:0.1.9-7.amzn2.0.3
Amazon Linux · 2 python2-pyasn1-modules 0:0.1.9-7.amzn2.0.3
Amazon Linux · 2 python3-pyasn1 0:0.1.9-7.amzn2.0.3
Amazon Linux · 2 python3-pyasn1-modules 0:0.1.9-7.amzn2.0.3

Vulnerabilities 1

  • High 7.5
    CVE-2026-23490

    pyasn1 has a DoS vulnerability in decoder

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

    pyasn1 pyasn1 open-webui katib-earlystopping Debian Ubuntu Wolfi PyPI

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-23490.html