Red Hat Security AdvisoryRHSA-2019:2037
fence-agents security, bug fix, and enhancement update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode (v. 7) fence-agents-4.2.1-24.el7, fence-agents-all-4.2.1-24.el7, fence-agents-amt-ws-4.2.1-24.el7 +34
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) fence-agents-virsh-4.2.1-24.el7
- Red Hat Enterprise Linux Server (v. 7) fence-agents-4.2.1-24.el7, fence-agents-all-4.2.1-24.el7, fence-agents-amt-ws-4.2.1-24.el7 +36
- Red Hat Enterprise Linux Server High Availability (v. 7) fence-agents-aliyun-4.2.1-24.el7, fence-agents-aws-4.2.1-24.el7, fence-agents-azure-arm-4.2.1-24.el7 +1
- Red Hat Enterprise Linux Server Optional (v. 7) fence-agents-virsh-4.2.1-24.el7
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) fence-agents-aliyun-4.2.1-24.el7, fence-agents-aws-4.2.1-24.el7, fence-agents-azure-arm-4.2.1-24.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) fence-agents-4.2.1-24.el7, fence-agents-all-4.2.1-24.el7, fence-agents-amt-ws-4.2.1-24.el7 +34
- Red Hat Enterprise Linux Workstation Optional (v. 7) fence-agents-virsh-4.2.1-24.el7
Fixes 1 record
Priority LOW 27
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.02171 · Published 2019-07-30 · Partial fix CWE-172
