RHSA-2026:59329: Important: resource-agents security update

Q: What is the practical impact of the referenced vulnerability?

The listed issue is a denial-of-service vulnerability in pyasn1 triggered by crafted ASN.1 REAL values. The provided advisory data does not describe affected service paths, attack prerequisites, or whether the issue can be exploited remotely.

Q: Which environments are covered by this update?

The update lists resource-agents and related SAP and SAP HANA resource-agent packages, including sap-cluster-connector. It also applies to Red Hat Enterprise Linux for SAP Solutions and Red Hat Enterprise Linux Resilient Storage for x86_64 under Extended Life Cycle Support.

Q: How can I determine whether my system needs this update?

Review whether the listed resource-agents or related SAP/SAP HANA packages are installed on an affected Red Hat Enterprise Linux for SAP Solutions or Resilient Storage x86_64 Extended Life Cycle Support environment. The provided data does not include fixed package versions or affected version ranges.

Published Aug 25, 2026

Updated

Important: resource-agents security update

Other sources

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.Security Fix(es): pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

23 affected componentsFixes available

Red Hat Red Hat Enterprise Linux for SAP Solutions for x86_64 - Extended Life Cycle Support

Red Hat Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle Support

Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Support

Red Hat Red Hat Enterprise Linux for SAP Solutions for IBM Power, little endian - Extended Life Cycle Support

Red Hat Red Hat Enterprise Linux for SAP Applications for x86_64 - Extended Life Cycle Support

Red Hat Red Hat Enterprise Linux High Availability for IBM Power, little endian - Extended Life Cycle Support

Red Hat Red Hat Enterprise Linux for SAP Applications for IBM Power, little endian - Extended Life Cycle Support

Red Hat Red Hat Enterprise Linux Resilient Storage for IBM Power, little endian - Extended Life Cycle Support

redhat/resource-agents<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/resource-agents-debuginfo<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/resource-agents-sap<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/sap-cluster-connector<3.0.1-37.el7_9.24

3.0.1-37.el7_9.24

redhat/resource-agents-sap-hana<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/resource-agents-sap-hana-scaleout<0.164.0-6.el7_9.24

0.164.0-6.el7_9.24

redhat/resource-agents<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/resource-agents-aliyun<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/resource-agents-gcp<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/resource-agents<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/resource-agents-debuginfo<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/resource-agents-sap<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/sap-cluster-connector<3.0.1-37.el7_9.24

3.0.1-37.el7_9.24

redhat/resource-agents-sap-hana<4.1.1-61.el7_9.24

4.1.1-61.el7_9.24

redhat/resource-agents-sap-hana-scaleout<0.164.0-6.el7_9.24

0.164.0-6.el7_9.24

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/resource-agents to a version that resolves this vulnerability.
Fixed in 4.1.1-61.el7_9.24
Upgrade
Upgrade redhat/resource-agents-debuginfo to a version that resolves this vulnerability.
Fixed in 4.1.1-61.el7_9.24
Upgrade
Upgrade redhat/resource-agents-sap to a version that resolves this vulnerability.
Fixed in 4.1.1-61.el7_9.24
Upgrade
Upgrade redhat/sap-cluster-connector to a version that resolves this vulnerability.
Fixed in 3.0.1-37.el7_9.24
Upgrade
Upgrade redhat/resource-agents-sap-hana to a version that resolves this vulnerability.
Fixed in 4.1.1-61.el7_9.24
Upgrade
Upgrade redhat/resource-agents-sap-hana-scaleout to a version that resolves this vulnerability.
Fixed in 0.164.0-6.el7_9.24
Upgrade
Upgrade redhat/resource-agents-aliyun to a version that resolves this vulnerability.
Fixed in 4.1.1-61.el7_9.24
Upgrade
Upgrade redhat/resource-agents-gcp to a version that resolves this vulnerability.
Fixed in 4.1.1-61.el7_9.24
Upgrade
Upgrade resource-agents packages to a version that resolves this vulnerability.
Patch CVE-2026-59886

Event History

Aug 25, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·07:34 AM

Data Sourced

via Red Hat·07:34 AM

Severity

Frequently Asked Questions

What is the practical impact of the referenced vulnerability?

The listed issue is a denial-of-service vulnerability in pyasn1 triggered by crafted ASN.1 REAL values. The provided advisory data does not describe affected service paths, attack prerequisites, or whether the issue can be exploited remotely.

Which environments are covered by this update?

The update lists resource-agents and related SAP and SAP HANA resource-agent packages, including sap-cluster-connector. It also applies to Red Hat Enterprise Linux for SAP Solutions and Red Hat Enterprise Linux Resilient Storage for x86_64 under Extended Life Cycle Support.

How can I determine whether my system needs this update?

Review whether the listed resource-agents or related SAP/SAP HANA packages are installed on an affected Red Hat Enterprise Linux for SAP Solutions or Resilient Storage x86_64 Extended Life Cycle Support environment. The provided data does not include fixed package versions or affected version ranges.

RHSA-2026:59329: Important: resource-agents security update

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the practical impact of the referenced vulnerability?

Which environments are covered by this update?

How can I determine whether my system needs this update?

Company

Resources

Contact

Frequently Asked Questions

What is the practical impact of the referenced vulnerability?

Which environments are covered by this update?

How can I determine whether my system needs this update?