Skip to content
OpenAdvisories
High ELSA-2026-4148 1 CVE

Important: python-pyasn1 security update (Oracle Linux 7)

Published Mar 18, 2026 · Updated Mar 18, 2026

Ecosystem: Oracle Linux

Summary

[0.1.9-7.0.1]
- Fixes CVE-2026-23490 fixes potential memory exhaustion [Orabug: 39060516]

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 python2-pyasn1 0:0.1.9-7.0.1.el7
Oracle Linux · 7 python2-pyasn1-modules 0:0.1.9-7.0.1.el7

Vulnerabilities 1

  • High 7.5
    CVE-2026-23490

    pyasn1 has a DoS vulnerability in decoder

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

    pyasn1 pyasn1 open-webui katib-earlystopping Debian Ubuntu Wolfi PyPI