Ubuntu has issued an advisory on January 22: https://ubuntu.com/security/notices/USN-7975-1
CVE: (none) => CVE-2026-23490Status comment: (none) => Patches available from UbuntuWhiteboard: (none) => MGA9TOOFlags: (none) => affects_mga9+Source RPM: (none) => python-pyasn1-0.6.1-2.mga10.src.rpm, python-pyasn1-0.4.8-6.mga9
Suggested advisory: ======================== The updated package fixes a security vulnerability: pyasn1 has a DoS vulnerability in decoder. (CVE-2026-23490) References: https://ubuntu.com/security/notices/USN-7975-1 ======================== Updated package in core/updates_testing: ======================== python3-pyasn1-0.4.8-6.1.mga9 from SRPM: python-pyasn1-0.4.8-6.1.mga9.src.rpm
Source RPM: python-pyasn1-0.6.1-2.mga10.src.rpm, python-pyasn1-0.4.8-6.mga9 => python-pyasn1-0.4.8-6.mga9Assignee: bugsquad => qa-bugsStatus: NEW => ASSIGNEDWhiteboard: MGA9TOO => (none)Version: Cauldron => 9Status comment: Patches available from Ubuntu => (none)
Flags: affects_mga9+ => (none)
Keywords: (none) => advisory
RH x86_64 installing python3-pyasn1-0.4.8-6.1.mga9.noarch.rpm from //home/katnatek/qa-testing/x86_64 Preparing... ################################################################################################### 1/1: python3-pyasn1 ################################################################################################### 1/1: removing python3-pyasn1-0.4.8-6.mga9.noarch ################################################################################################### I install wapiti to test (I could live without see it again :P) Repeat test from bug 34144 comment 11 wapiti -u http://testhtml5.vulnweb.com/ --flush-session __ __ .__ __ .__________ / \ / \_____ ______ |__|/ |_|__\_____ \ \ \/\/ /\__ \ \____ \| \ __\ | _(__ < \ / / __ \| |_> > || | | |/ \ \__/\ / (____ / __/|__||__| |__/______ / \/ \/|__| \/ Wapiti 3.1.4 (wapiti-scanner.github.io) [*] Saving scan state, please wait... [!] Unable to import module ssl [!] Unable to find a module named ssl [*] Launching module file [*] Launching module sql [*] Launching module ssrf [*] Launching module http_headers Checking X-Frame-Options : X-Frame-Options is not set Checking X-Content-Type-Options : X-Content-Type-Options is not set [*] Launching module cookieflags Checking cookie : username HttpOnly flag is not set in the cookie : username Secure flag is not set in the cookie : username [*] Launching module csp CSP is not set [*] Launching module exec [*] Launching module redirect [*] Launching module xss [*] Launching module permanentxss [*] Generating report... A report has been generated in the file /home/katnatek/.wapiti/generated_report Open /home/katnatek/.wapiti/generated_report/testhtml5.vulnweb.com_01242026_2238.html with a browser to see this report. Looks good for me
Flags: (none) => test_passed_mga9_64+
CC: (none) => andrewsfarmWhiteboard: (none) => MGA9-64-OK
tested with deluge under strace: refs found t0 python3-pyasn1. Works OK.
CC: (none) => herman.viaene
Validating.
CC: (none) => sysadmin-bugsKeywords: (none) => validated_update
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2026-0020.html
Resolution: (none) => FIXEDStatus: ASSIGNED => RESOLVED