Skip to content
OpenAdvisories
High RHSA-2026:40236 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 17, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 jaeger 0:2.19.0-1.1.hum1

Vulnerabilities 2

  • High 7.5
    CVE-2026-59884

    pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction …

    pyasn1 pyasn1 kubeflow-pipelines-apiserver airflow-3 Debian Ubuntu Azure Linux Wolfi PyPI
  • High 7.5
    CVE-2026-59885

    pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consum…

    pyasn1 pyasn1 kubeflow-pipelines-apiserver airflow-3 Debian Ubuntu Azure Linux Wolfi PyPI

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-59884
  • report
    https://access.redhat.com/security/cve/CVE-2026-59885
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40236.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2500204
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-59884
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-59884
  • article
    https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5
  • article
    https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4
  • article
    https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2500380
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-59885
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-59885
  • article
    https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9
  • article
    https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj