High ELSA-2026-59241 1 CVE

Important: python-pyasn1 security update (Oracle Linux 8)

Published Aug 25, 2026 · Updated Aug 25, 2026

Ecosystem: Oracle Linux

Summary

[0.3.7-6.2]
- Fix denial of service in Real type __float__() method
(CVE-2026-59886)
- Resolves: RHEL-217908

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	python3-pyasn1	0:0.3.7-6.el8_10.2
Oracle Linux · 8	python3-pyasn1-modules	0:0.3.7-6.el8_10.2

Vulnerabilities 1

High 7.5

CVE-2026-59886

pyasn1: Uncontrolled resource consumption when converting decoded REAL values

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a…

pyasn1 pyasn1 kubeflow-pipelines-apiserver airflow-3 Debian Ubuntu Azure Linux Wolfi PyPI

Jul 14, 2026