Skip to content
OpenAdvisories
High ELSA-2026-4146 1 CVE

Important: python-pyasn1 security update (Oracle Linux 8)

Published Mar 9, 2026 · Updated Mar 9, 2026

Ecosystem: Oracle Linux

Summary

[0.3.7-6.el8_10.1]
- Resolves: RHEL-148145

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 python3-pyasn1 0:0.3.7-6.el8_10.1
Oracle Linux · 8 python3-pyasn1-modules 0:0.3.7-6.el8_10.1

Vulnerabilities 1

  • High 7.5
    CVE-2026-23490

    pyasn1 has a DoS vulnerability in decoder

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

    pyasn1 pyasn1 open-webui katib-earlystopping Debian Ubuntu Wolfi PyPI