Skip to content
OpenAdvisories
High ELSA-2026-1904 1 CVE

Important: resource-agents security update (Oracle Linux 8)

Published Feb 4, 2026 · Updated Feb 4, 2026

Ecosystem: Oracle Linux

Summary

[4.9.0-54.28]
- bundled pyasn1: fix CVE-2026-23490

Resolves: RHEL-142448

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 resource-agents 0:4.9.0-54.el8_10.28

Vulnerabilities 1

  • High 7.5
    CVE-2026-23490

    pyasn1 has a DoS vulnerability in decoder

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

    pyasn1 pyasn1 open-webui katib-earlystopping Debian Ubuntu Wolfi PyPI