Detections
Analytics

Chainguard: openstack-keystone-2026.2: security update to 30.0.1_git20261017-r5

high Tenable Self-Hosted Container Security Plugin ID 478119

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly
 shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or
 CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts a definite-length
 constructed BIT STRING. BitStringPayloadDecoder repeatedly calls BitString.fromOctetString with the prior
 bitString as prepend, shifting an ever-growing SizedInteger for each fragment and causing quadratic work.
 Large fragmented values can exhaust CPU during decode() without requiring later conversion or formatting.
 This issue is fixed in version 0.6.5. (CVE-2026-119196)

Solution

Update the openstack-keystone-2026.2 library and its related packages to version 30.0.1_git20261017-r5 or later.

Plugin Details

Severity: High

ID: 478119

Version: Revision 1.1

Type: Local

Published: 10/31/2026

Updated: 10/31/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.72

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2026-119196

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 10/29/2026

Reference Information

CVE: CVE-2026-119196