Summary
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.
Security Fix(es):
* pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | resource-agents | 4.9.0-54.el8_10.37.alma.1 |
| AlmaLinux · 8 | resource-agents-aliyun | 4.9.0-54.el8_10.37.alma.1 |
| AlmaLinux · 8 | resource-agents-gcp | 4.9.0-54.el8_10.37.alma.1 |
| AlmaLinux · 8 | resource-agents-paf | 4.9.0-54.el8_10.37.alma.1 |
Vulnerabilities 1
-
High 7.5
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a…