High ELSA-2026-13902 1 CVE

Important: resource-agents security update (Oracle Linux 8)

Published May 7, 2026 · Updated May 7, 2026

Ecosystem: Oracle Linux

Summary

[4.9.0-54.33]
- bundled pyasn1: fix CVE-2026-30922
Resolves: RHEL-157190

[4.9.0-54.32]
- db2: do not use db2stop to avoid divergence in the log

Resolves: RHEL-166181

[4.9.0-54.31]
- db2: set reintegration when promotion is successful

Resolves: RHEL-153157

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	resource-agents	0:4.9.0-54.el8_10.33

Vulnerabilities 1

High 7.5

CVE-2026-30922

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payl…

pyasn1 pyasn1 kubeflow-pipelines-apiserver airflow-3 Debian Ubuntu Azure Linux Wolfi PyPI

Mar 18, 2026