RHSA-2024:1155: Moderate: fence-agents security update
Published Mar 5, 2024
·Updated
Moderate: fence-agents security update
Other sources
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323) jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
119 affected componentsFixes available
redhat/fence-agents<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-common<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-compute<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-debugsource<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-ibm-powervs<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-ibm-vpc<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kdump-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kubevirt<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kubevirt-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-virsh<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virt<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virt-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-cpg<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-cpg-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-libvirt<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-libvirt-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-multicast<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-multicast-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-serial<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-serial-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-tcp<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-virtd-tcp-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/ha-cloud-support-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/ha-openstack-support<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/ha-openstack-support-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-debugsource<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kdump-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kubevirt<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kubevirt-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-aliyun<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-all<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-amt-ws<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-apc<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-apc-snmp<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-aws<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-azure-arm<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-bladecenter<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-brocade<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-cisco-mds<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-cisco-ucs<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-drac5<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-eaton-snmp<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-emerson<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-eps<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-heuristics-ping<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-hpblade<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-ibmblade<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-ifmib<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-ilo-moonshot<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-ilo-mp<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-ilo-ssh<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-ilo2<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-intelmodular<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-ipdu<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-ipmilan<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kdump<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-mpath<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-openstack<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-redfish<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-rhevm<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-rsa<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-rsb<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-sbd<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-scsi<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-vmware-rest<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-vmware-soap<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-wti<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/ha-cloud-support<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-compute<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-debugsource<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kdump-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kubevirt<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kubevirt-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/ha-openstack-support<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/ha-openstack-support-debuginfo<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-all<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kdump<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-lpar<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-openstack<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-redfish<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-debuginfo<4.10.0-20.el9_0.11.aa
4.10.0-20.el9_0.11.aa
redhat/fence-agents-debugsource<4.10.0-20.el9_0.11.aa
4.10.0-20.el9_0.11.aa
redhat/fence-agents-kdump-debuginfo<4.10.0-20.el9_0.11.aa
4.10.0-20.el9_0.11.aa
redhat/fence-agents-kubevirt<4.10.0-20.el9_0.11.aa
4.10.0-20.el9_0.11.aa
redhat/fence-agents-kubevirt-debuginfo<4.10.0-20.el9_0.11.aa
4.10.0-20.el9_0.11.aa
redhat/fence-agents-all<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-kdump<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-redfish<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-zvm<4.10.0-20.el9_0.11
4.10.0-20.el9_0.11
redhat/fence-agents-all<4.10.0-20.el9_0.11.aa
4.10.0-20.el9_0.11.aa
redhat/fence-agents-kdump<4.10.0-20.el9_0.11.aa
4.10.0-20.el9_0.11.aa
redhat/fence-agents-redfish<4.10.0-20.el9_0.11.aa
4.10.0-20.el9_0.11.aa
Red Hat Red Hat Enterprise Linux High Availability for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux High Availability (for IBM z Systems) - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Resilient Storage for x86_64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Resilient Storage for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux High Availability (for ARM 64) - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux High Availability (for IBM Power LE) - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for Power LE - 4 years of updates
Red Hat Red Hat Enterprise Linux Resilient Storage for IBM Power LE - Extended Update Support
Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Update Support
Remediation
Event History
Mar 5, 2024
Advisory Published
via Red Hat·12:00 AM
Advisory Published
via Red Hat·04:29 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1155?
The severity of RHSA-2024:1155 is classified as moderate.
2
How do I fix RHSA-2024:1155?
To fix RHSA-2024:1155, you need to update the affected fence-agents packages to version 4.10.0-20.el9_0.11.
3
Which packages are affected by RHSA-2024:1155?
The affected packages in RHSA-2024:1155 include fence-agents, fence-agents-common, and several others related to power management.
4
What type of software is impacted by RHSA-2024:1155?
RHSA-2024:1155 impacts software associated with remote power management for cluster devices.
5
Is there any specific action needed for deploying the update for RHSA-2024:1155?
Yes, it is recommended to plan downtime if necessary, then deploy the update to all affected systems.