Summary
[4.9.0-54.37]
- bundled pyasn1: fix CVE-2026-59886
Resolves: RHEL-217924
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | resource-agents | 0:4.9.0-54.el8_10.37 |
Vulnerabilities 1
-
High 7.5
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a…