Red Hat Security Advisory

RHSA-2024:6311

resource-agents security update

Released 2024-09-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux HighAvailability (v. 8) resource-agents-4.9.0-54.el8_10.4, resource-agents-aliyun-4.9.0-54.el8_10.4, resource-agents-gcp-4.9.0-54.el8_10.4 +1
Red Hat Enterprise Linux ResilientStorage (v. 8) resource-agents-4.9.0-54.el8_10.4, resource-agents-aliyun-4.9.0-54.el8_10.4, resource-agents-gcp-4.9.0-54.el8_10.4 +1

TI-2024-05888 CVE-2024-6345 · GHSA-cx63-2mw6-8hw5

HIGH 73

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01939 Published 2024-07-15 Partial fix · 70.0, 70.0.0 CWE-94

TI-2024-25208 CVE-2024-37891 · GHSA-34jh-p97f-mpxf

LOW 31

urllib3 is a user-friendly HTTP client library for Python.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01141 Published 2024-06-17 Partial fix · 1.26.19, 2.2.2 CWE-669