Red Hat Security AdvisoryRHSA-2024:6309
fence-agents security update
Released 2024-09-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) fence-agents-4.2.1-129.el8_10.4, fence-agents-all-4.2.1-129.el8_10.4, fence-agents-amt-ws-4.2.1-129.el8_10.4 +40
- Red Hat Enterprise Linux HighAvailability (v. 8) fence-agents-aliyun-4.2.1-129.el8_10.4, fence-agents-aws-4.2.1-129.el8_10.4, fence-agents-azure-arm-4.2.1-129.el8_10.4 +2
- Red Hat Enterprise Linux ResilientStorage (v. 8) fence-agents-aliyun-4.2.1-129.el8_10.4, fence-agents-aws-4.2.1-129.el8_10.4, fence-agents-azure-arm-4.2.1-129.el8_10.4 +2
Fixes 2 records
Priority HIGH 73
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01939 · Published 2024-07-15 · Partial fix · 70.0, 70.0.0 CWE-94
Priority LOW 31
urllib3 is a user-friendly HTTP client library for Python.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01141 · Published 2024-06-17 · Partial fix · 1.26.19, 2.2.2 CWE-669