Summary
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.
Security Fix(es):
* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | resource-agents | 4.9.0-54.el8_10.28 |
| AlmaLinux · 8 | resource-agents-aliyun | 4.9.0-54.el8_10.28 |
| AlmaLinux · 8 | resource-agents-gcp | 4.9.0-54.el8_10.28 |
| AlmaLinux · 8 | resource-agents-paf | 4.9.0-54.el8_10.28 |
Vulnerabilities 1
-
High 7.5
pyasn1 has a DoS vulnerability in decoder
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.