RHSA-2025:0308: Important: fence-agents security update
Published Jan 14, 2025
·Updated
Important: fence-agents security update
Other sources
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. <br>Security Fix(es):<br><li> fence-agents: Jinja has a sandbox breakout through indirect reference to format method [rhel-9.5.z] (CVE-2024-56326)</li> <li> fence-agents: Jinja has a sandbox breakout through malicious filenames [rhel-9.5.z] (CVE-2024-56201)</li>
— Red Hat
Affected Software
104 affected componentsFixes available
redhat/fence-agents<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-common<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-compute<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-debugsource<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-ibm-powervs<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-ibm-vpc<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kdump-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kubevirt<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kubevirt-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-virsh<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virt<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virt-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-cpg<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-cpg-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-libvirt<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-libvirt-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-multicast<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-multicast-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-serial<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-serial-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-tcp<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-virtd-tcp-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/ha-cloud-support-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-debugsource<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kdump-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kubevirt<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kubevirt-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-compute<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-debugsource<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kdump-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kubevirt<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kubevirt-debuginfo<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-aliyun<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-all<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-amt-ws<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-apc<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-apc-snmp<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-aws<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-azure-arm<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-bladecenter<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-brocade<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-cisco-mds<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-cisco-ucs<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-drac5<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-eaton-snmp<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-emerson<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-eps<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-heuristics-ping<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-hpblade<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-ibmblade<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-ifmib<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-ilo-moonshot<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-ilo-mp<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-ilo-ssh<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-ilo2<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-intelmodular<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-ipdu<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-ipmilan<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kdump<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-mpath<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-openstack<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-redfish<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-rhevm<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-rsa<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-rsb<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-sbd<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-scsi<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-vmware-rest<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-vmware-soap<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-wti<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/ha-cloud-support<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-all<4.10.0-76.el9_5.4.aa
4.10.0-76.el9_5.4.aa
redhat/fence-agents-debuginfo<4.10.0-76.el9_5.4.aa
4.10.0-76.el9_5.4.aa
redhat/fence-agents-debugsource<4.10.0-76.el9_5.4.aa
4.10.0-76.el9_5.4.aa
redhat/fence-agents-kdump<4.10.0-76.el9_5.4.aa
4.10.0-76.el9_5.4.aa
redhat/fence-agents-kdump-debuginfo<4.10.0-76.el9_5.4.aa
4.10.0-76.el9_5.4.aa
redhat/fence-agents-kubevirt-debuginfo<4.10.0-76.el9_5.4.aa
4.10.0-76.el9_5.4.aa
redhat/fence-agents-redfish<4.10.0-76.el9_5.4.aa
4.10.0-76.el9_5.4.aa
redhat/fence-agents-kubevirt<4.10.0-76.el9_5.4.aa
4.10.0-76.el9_5.4.aa
redhat/fence-agents-all<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kdump<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-redfish<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-zvm<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-all<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-kdump<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-lpar<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-openstack<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
redhat/fence-agents-redfish<4.10.0-76.el9_5.4
4.10.0-76.el9_5.4
Red Hat Red Hat Enterprise Linux High Availability for Power, little endian
Red Hat Red Hat Enterprise Linux High Availability for x86_64
Red Hat Red Hat Enterprise Linux Resilient Storage for IBM z Systems
Red Hat Red Hat Enterprise Linux Resilient Storage for x86_64
Red Hat Red Hat Enterprise Linux Resilient Storage for Power, little endian
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux High Availability for IBM z Systems
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux High Availability for ARM 64
Remediation
Event History
Jan 14, 2025
Advisory Published
via Red Hat·08:40 AM
Jan 18, 2025
Advisory Published
via Red Hat·01:08 PM
Frequently Asked Questions
1
What is the severity of RHSA-2025:0308?
The severity of RHSA-2025:0308 is classified as Important.
2
How do I fix RHSA-2025:0308?
To fix RHSA-2025:0308, you need to apply the latest security patches for the affected fence-agents packages.
3
What packages are affected by RHSA-2025:0308?
RHSA-2025:0308 affects multiple fence-agents packages including fence-agents, fence-agents-common, and fence-agents-kubevirt among others.
4
Is RHSA-2025:0308 applicable to all Red Hat Enterprise Linux versions?
RHSA-2025:0308 is applicable to specific versions of Red Hat Enterprise Linux High Availability and other related products.
5
What are the impacts of not addressing RHSA-2025:0308?
Not addressing RHSA-2025:0308 may leave your systems vulnerable to security risks associated with remote power management functionalities.