RHSA-2024:8171: Important: fence-agents security update
Published Oct 16, 2024
·Updated
Important: fence-agents security update
Other sources
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
65 affected componentsFixes available
redhat/fence-agents<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-aliyun-debuginfo<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-all<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-amt-ws<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-apc<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-apc-snmp<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-bladecenter<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-brocade<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-cisco-mds<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-cisco-ucs<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-common<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-compute<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-debuginfo<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-debugsource<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-drac5<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-eaton-snmp<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-emerson<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-eps<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-heuristics-ping<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-hpblade<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-ibm-powervs<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-ibm-vpc<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-ibmblade<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-ifmib<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-ilo-moonshot<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-ilo-mp<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-ilo-ssh<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-ilo2<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-intelmodular<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-ipdu<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-ipmilan<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-kdump<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-kdump-debuginfo<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-kubevirt<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-kubevirt-debuginfo<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-lpar<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-mpath<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-redfish<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-rhevm<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-rsa<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-rsb<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-sbd<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-scsi<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-virsh<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-vmware-rest<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-vmware-soap<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-wti<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-all<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-debuginfo<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-debugsource<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-kdump<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-kdump-debuginfo<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-kubevirt<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-kubevirt-debuginfo<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-redfish<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-azure-arm<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-gce<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
redhat/fence-agents-aliyun<4.2.1-89.el8_6.14
4.2.1-89.el8_6.14
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Telecommunications Update Service
Red Hat Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions
Remediation
Event History
Oct 16, 2024
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·06:18 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:8171?
The severity of RHSA-2024:8171 is classified as important.
2
How do I fix RHSA-2024:8171?
To fix RHSA-2024:8171, update to the remedied package version 4.2.1-89.el8_6.14.
3
Which software is affected by RHSA-2024:8171?
The affected software includes several Red Hat Enterprise Linux packages, primarily the fence-agents.
4
What is the purpose of the fence-agents affected by RHSA-2024:8171?
Fence-agents are used for remote power management of cluster devices to manage node failures.
5
Are there multiple versions of packages affected by RHSA-2024:8171?
Yes, multiple versions of various 'fence-agents' packages are affected by the vulnerability identified in RHSA-2024:8171.