Red Hat Security Advisory

RHSA-2024:1155

fence-agents security update

Released 2024-03-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.0) fence-agents-4.10.0-20.el9_0.11, fence-agents-common-4.10.0-20.el9_0.11, fence-agents-compute-4.10.0-20.el9_0.11 +12
Red Hat Enterprise Linux High Availability EUS (v.9.0) fence-agents-aliyun-4.10.0-20.el9_0.11, fence-agents-all-4.10.0-20.el9_0.11, fence-agents-amt-ws-4.10.0-20.el9_0.11 +39
Red Hat Enterprise Linux Resilient Storage EUS (v.9.0) fence-agents-aliyun-4.10.0-20.el9_0.11, fence-agents-all-4.10.0-20.el9_0.11, fence-agents-amt-ws-4.10.0-20.el9_0.11 +39

TI-2024-14788 CVE-2024-22195 · GHSA-h5c8-rqwp-cp95

LOW 29

Jinja is an extensible templating engine.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00892 Published 2024-01-11 Partial fix · 3.1.3 CWE-79

TI-2023-28707 CVE-2023-52323 · GHSA-j225-cvw7-qrx7

LOW 27

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00618 Published 2024-01-05 Partial fix · 3.19.1 CWE-203

TI-2023-24565 CVE-2023-45803 · GHSA-g4mx-q9vg-27p4

LOW 20

urllib3 is a user-friendly HTTP client library for Python.

CVSS 3.1MEDIUM 4.2 Adjacent network High privileges No interaction EPSS 0.00593 Published 2023-10-17 Partial fix · 2.0.7, 1.26.18 CWE-200