Red Hat Security Advisory

RHSA-2023:7435

fence-agents security update

Released 2023-11-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v. 8.2) fence-agents-4.2.1-41.el8_2.12, fence-agents-all-4.2.1-41.el8_2.12, fence-agents-amt-ws-4.2.1-41.el8_2.12 +35
Red Hat Enterprise Linux AppStream E4S (v. 8.2) fence-agents-4.2.1-41.el8_2.12, fence-agents-all-4.2.1-41.el8_2.12, fence-agents-amt-ws-4.2.1-41.el8_2.12 +36
Red Hat Enterprise Linux AppStream TUS (v. 8.2) fence-agents-4.2.1-41.el8_2.12, fence-agents-all-4.2.1-41.el8_2.12, fence-agents-amt-ws-4.2.1-41.el8_2.12 +35
Red Hat Enterprise Linux High Availability E4S (v. 8.2) fence-agents-aliyun-4.2.1-41.el8_2.12, fence-agents-aws-4.2.1-41.el8_2.12, fence-agents-azure-arm-4.2.1-41.el8_2.12 +1
Red Hat Enterprise Linux High Availability TUS (v. 8.2) fence-agents-aliyun-4.2.1-41.el8_2.12, fence-agents-aws-4.2.1-41.el8_2.12, fence-agents-azure-arm-4.2.1-41.el8_2.12 +1

Fixes 2 records

TI-2023-19353 CVE-2023-37920 · GHSA-xqr8-7jwr-rhp7

Certifi's removal of e-Tugra root certificate

MEDIUM 49

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00568 Published 2023-07-25 Partial fix · 2023.07.22, 2023.7.22 CWE-345

TI-2023-23495 CVE-2023-43804 · GHSA-v845-jxx5-vc9f

`Cookie` HTTP header isn't stripped on cross-origin redirects

LOW 38

urllib3 is a user-friendly HTTP client library for Python.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0136 Published 2023-10-04 Partial fix · 2.0.6, 1.26.17 CWE-200