High ELSA-2026-59242 1 CVE

Important: python-pyasn1 security update (Oracle Linux 9)

Published Aug 25, 2026 · Updated Aug 25, 2026

Ecosystem: Oracle Linux

Summary

[0.4.8-7.1]
- Fix CVE-2026-59886: prevent overflow in Real type float conversion
- Resolves: RHEL-217915

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	python3-pyasn1	0:0.4.8-7.el9_8.1
Oracle Linux · 9	python3-pyasn1-modules	0:0.4.8-7.el9_8.1

Vulnerabilities 1

High 7.5

CVE-2026-59886

pyasn1: Uncontrolled resource consumption when converting decoded REAL values

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a…

pyasn1 pyasn1 kubeflow-pipelines-apiserver airflow-3 Debian Ubuntu Azure Linux Wolfi PyPI

Jul 14, 2026