- Vulnerability/
- RHSA-2023:7385
21/11/2023
17/2/2024
RHSA-2023:7385: Moderate: fence-agents security update
First published: Tue Nov 21 2023(Updated: )
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. <br>Security Fix(es):<br><li> python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)</li> <li> python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/fence-agents | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-common | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-compute | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-debugsource | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-ibm-powervs | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-ibm-vpc | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kdump-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kubevirt | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kubevirt-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-virsh | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virt | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virt-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-cpg | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-cpg-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-libvirt | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-libvirt-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-multicast | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-multicast-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-serial | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-serial-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-tcp | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-virtd-tcp-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/ha-cloud-support-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/ha-openstack-support | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/ha-openstack-support-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-debugsource | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kdump-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kubevirt | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kubevirt-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-aliyun | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-all | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-amt-ws | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-apc | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-apc-snmp | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-aws | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-azure-arm | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-bladecenter | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-brocade | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-cisco-mds | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-cisco-ucs | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-drac5 | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-eaton-snmp | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-emerson | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-eps | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-heuristics-ping | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-hpblade | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-ibmblade | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-ifmib | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-ilo-moonshot | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-ilo-mp | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-ilo-ssh | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-ilo2 | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-intelmodular | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-ipdu | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-ipmilan | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kdump | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-mpath | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-openstack | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-redfish | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-rhevm | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-rsa | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-rsb | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-sbd | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-scsi | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-vmware-rest | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-vmware-soap | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-wti | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/ha-cloud-support | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-compute | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-debugsource | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kdump-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kubevirt | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kubevirt-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/ha-openstack-support | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/ha-openstack-support-debuginfo | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-all | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kdump | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-lpar | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-openstack | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-redfish | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-debuginfo | <4.10.0-20.el9_0.10.aa | 4.10.0-20.el9_0.10.aa |
| redhat/fence-agents-debugsource | <4.10.0-20.el9_0.10.aa | 4.10.0-20.el9_0.10.aa |
| redhat/fence-agents-kdump-debuginfo | <4.10.0-20.el9_0.10.aa | 4.10.0-20.el9_0.10.aa |
| redhat/fence-agents-kubevirt | <4.10.0-20.el9_0.10.aa | 4.10.0-20.el9_0.10.aa |
| redhat/fence-agents-kubevirt-debuginfo | <4.10.0-20.el9_0.10.aa | 4.10.0-20.el9_0.10.aa |
| redhat/fence-agents-all | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-kdump | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-redfish | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-zvm | <4.10.0-20.el9_0.10 | 4.10.0-20.el9_0.10 |
| redhat/fence-agents-all | <4.10.0-20.el9_0.10.aa | 4.10.0-20.el9_0.10.aa |
| redhat/fence-agents-kdump | <4.10.0-20.el9_0.10.aa | 4.10.0-20.el9_0.10.aa |
| redhat/fence-agents-redfish | <4.10.0-20.el9_0.10.aa | 4.10.0-20.el9_0.10.aa |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/references
- agent/severity
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/title
- agent/tags
- agent/description
- agent/event
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2023:7385
- agent/software-canonical-lookup
- package-manager/redhat