Red Hat Security AdvisoryRHSA-2024:8171
fence-agents security update
Released 2024-10-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) fence-agents-4.2.1-89.el8_6.14, fence-agents-all-4.2.1-89.el8_6.14, fence-agents-amt-ws-4.2.1-89.el8_6.14 +39
- Red Hat Enterprise Linux AppStream E4S (v.8.6) fence-agents-4.2.1-89.el8_6.14, fence-agents-all-4.2.1-89.el8_6.14, fence-agents-amt-ws-4.2.1-89.el8_6.14 +40
- Red Hat Enterprise Linux AppStream TUS (v.8.6) fence-agents-4.2.1-89.el8_6.14, fence-agents-all-4.2.1-89.el8_6.14, fence-agents-amt-ws-4.2.1-89.el8_6.14 +39
- Red Hat Enterprise Linux High Availability E4S (v.8.6) fence-agents-aliyun-4.2.1-89.el8_6.14, fence-agents-aws-4.2.1-89.el8_6.14, fence-agents-azure-arm-4.2.1-89.el8_6.14 +1
- Red Hat Enterprise Linux High Availability TUS (v.8.6) fence-agents-aliyun-4.2.1-89.el8_6.14, fence-agents-aws-4.2.1-89.el8_6.14, fence-agents-azure-arm-4.2.1-89.el8_6.14 +1
Fixes 1 record
Priority HIGH 73
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01939 · Published 2024-07-15 · Partial fix · 70.0, 70.0.0 CWE-94