RHSA-2024:8168: Important: fence-agents security update
Published Oct 16, 2024
·Updated
Important: fence-agents security update
Other sources
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
94 affected componentsFixes available
redhat/fence-agents<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-aliyun-debuginfo<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-all<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-amt-ws<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-apc<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-apc-snmp<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-bladecenter<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-brocade<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-cisco-mds<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-cisco-ucs<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-common<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-compute<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-debuginfo<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-debugsource<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-drac5<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-eaton-snmp<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-emerson<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-eps<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-heuristics-ping<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-hpblade<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-ibm-powervs<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-ibm-vpc<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-ibmblade<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-ifmib<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-ilo-moonshot<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-ilo-mp<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-ilo-ssh<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-ilo2<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-intelmodular<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-ipdu<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-ipmilan<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kdump<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kdump-debuginfo<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kubevirt<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kubevirt-debuginfo<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-lpar<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-mpath<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-redfish<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-rhevm<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-rsa<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-rsb<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-sbd<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-scsi<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-virsh<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-vmware-rest<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-vmware-soap<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-wti<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-all<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-debuginfo<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-debugsource<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kdump<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kdump-debuginfo<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kubevirt<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kubevirt-debuginfo<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-redfish<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-zvm<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-all<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-debuginfo<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-debugsource<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kdump<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kdump-debuginfo<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kubevirt<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-kubevirt-debuginfo<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-redfish<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-all<4.2.1-112.el8_8.8.aa
4.2.1-112.el8_8.8.aa
redhat/fence-agents-debuginfo<4.2.1-112.el8_8.8.aa
4.2.1-112.el8_8.8.aa
redhat/fence-agents-debugsource<4.2.1-112.el8_8.8.aa
4.2.1-112.el8_8.8.aa
redhat/fence-agents-kdump<4.2.1-112.el8_8.8.aa
4.2.1-112.el8_8.8.aa
redhat/fence-agents-kdump-debuginfo<4.2.1-112.el8_8.8.aa
4.2.1-112.el8_8.8.aa
redhat/fence-agents-kubevirt<4.2.1-112.el8_8.8.aa
4.2.1-112.el8_8.8.aa
redhat/fence-agents-kubevirt-debuginfo<4.2.1-112.el8_8.8.aa
4.2.1-112.el8_8.8.aa
redhat/fence-agents-redfish<4.2.1-112.el8_8.8.aa
4.2.1-112.el8_8.8.aa
redhat/fence-agents-aliyun<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-aws<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-azure-arm<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-openstack<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
redhat/fence-agents-openstack<4.2.1-112.el8_8.8
4.2.1-112.el8_8.8
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux High Availability for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux High Availability (for IBM z Systems) - Extended Update Support
Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Telecommunications Update Service
Red Hat Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux High Availability (for ARM 64) - Extended Update Support
Remediation
Event History
Oct 16, 2024
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·06:18 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:8168?
The severity level of RHSA-2024:8168 is classified as important.
2
How do I fix RHSA-2024:8168?
To resolve RHSA-2024:8168, you need to update the fence-agents package to version 4.2.1-112.el8_8.8.
3
What packages are affected by RHSA-2024:8168?
The RHSA-2024:8168 vulnerability affects various packages related to fence-agents, including fence-agents-all, fence-agents-debuginfo, and others.
4
Why is the update for RHSA-2024:8168 necessary?
The update for RHSA-2024:8168 is necessary to patch security vulnerabilities in the fence-agents that manage power to cluster devices.
5
Is there any known exploit for RHSA-2024:8168?
At this time, there are no publicly known exploits specifically targeting the vulnerabilities addressed in RHSA-2024:8168.