Red Hat Security Advisory

RHSA-2026:94557

fence-agents security update

Released 2026-11-03 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.4) fence-agents-4.10.0-62.el9_4.31, fence-agents-common-4.10.0-62.el9_4.31, fence-agents-compute-4.10.0-62.el9_4.31 +11
Red Hat Enterprise Linux High Availability E4S (v.9.4) fence-agents-aliyun-4.10.0-62.el9_4.31, fence-agents-all-4.10.0-62.el9_4.31, fence-agents-amt-ws-4.10.0-62.el9_4.31 +40
Red Hat Enterprise Linux Resilient Storage E4S (v.9.4) fence-agents-aliyun-4.10.0-62.el9_4.31, fence-agents-all-4.10.0-62.el9_4.31, fence-agents-amt-ws-4.10.0-62.el9_4.31 +39

TI-2026-65303 CVE-2026-102268 · GHSA-ffc3-869f-jxw9

HIGH 80

PyJWT is a Python implementation of JSON Web Token standards.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00236 Published 2026-09-28 Partial fix · 2.14.0 CWE-347

TI-2026-65301 CVE-2026-102266 · GHSA-9j54-fg26-wv3r

HIGH 74

PyJWT is a Python implementation of JSON Web Token standards.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00225 Published 2026-09-28 Partial fix · 2.14.0 CWE-347

TI-2026-65307 CVE-2026-102272 · GHSA-r6x4-923q-g947

HIGH 68

PyJWT is a Python implementation of JSON Web Token standards.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00216 Published 2026-09-28 Partial fix · 2.14.0 CWE-347

TI-2026-65306 CVE-2026-102271 · GHSA-p4g4-x82p-q773

HIGH 68

PyJWT is a Python implementation of JSON Web Token standards.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00215 Published 2026-09-28 Partial fix · 2.14.0 CWE-347

TI-2026-65302 CVE-2026-102267 · GHSA-9v7f-9g4p-ffgj

MEDIUM 40

PyJWT is a Python implementation of JSON Web Token standards.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00159 Published 2026-09-28 Partial fix · 2.14.0 CWE-200