- Vulnerability/
- RHSA-2021:4139
RHSA-2021:4139: Moderate: resource-agents security, bug fix, and enhancement update
First published: Tue Nov 09 2021(Updated: )
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.<br>Security Fix(es):<br><li> python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)</li> <li> python-pygments: ReDoS in multiple lexers (CVE-2021-27291)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/resource-agents | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-aliyun | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-aliyun-debuginfo | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-debuginfo | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-debugsource | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-gcp | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-paf | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-debuginfo | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-debugsource | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-paf | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-debuginfo | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-debugsource | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents-paf | <4.1.1-98.el8 | 4.1.1-98.el8 |
| redhat/resource-agents | <4.1.1-98.el8.aa | 4.1.1-98.el8.aa |
| redhat/resource-agents-debuginfo | <4.1.1-98.el8.aa | 4.1.1-98.el8.aa |
| redhat/resource-agents-debugsource | <4.1.1-98.el8.aa | 4.1.1-98.el8.aa |
| redhat/resource-agents-paf | <4.1.1-98.el8.aa | 4.1.1-98.el8.aa |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1872754
- https://bugzilla.redhat.com/show_bug.cgi?id=1891883
- https://bugzilla.redhat.com/show_bug.cgi?id=1902045
- https://bugzilla.redhat.com/show_bug.cgi?id=1920698
- https://bugzilla.redhat.com/show_bug.cgi?id=1922136
- https://bugzilla.redhat.com/show_bug.cgi?id=1924363
- https://bugzilla.redhat.com/show_bug.cgi?id=1928238
- https://bugzilla.redhat.com/show_bug.cgi?id=1932863
- https://bugzilla.redhat.com/show_bug.cgi?id=1934651
- https://bugzilla.redhat.com/show_bug.cgi?id=1939281
- https://bugzilla.redhat.com/show_bug.cgi?id=1939992
- https://bugzilla.redhat.com/show_bug.cgi?id=1940094
- https://bugzilla.redhat.com/show_bug.cgi?id=1940603
- https://bugzilla.redhat.com/show_bug.cgi?id=1957765
- https://bugzilla.redhat.com/show_bug.cgi?id=1969968
- https://bugzilla.redhat.com/show_bug.cgi?id=1972035
- https://bugzilla.redhat.com/show_bug.cgi?id=1972743
- https://access.redhat.com/security/updates/classification/#moderate
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
- https://access.redhat.com/errata/RHSA-2021:4139 (Advisory)
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2021:4139
- agent/software-canonical-lookup
- package-manager/redhat