Skip to content
OpenAdvisories
Medium ALAS2-2019-1348 1 CVE

Moderate: fence-agents security update (Amazon Linux 2)

Published Nov 4, 2019 · Updated Nov 7, 2019

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-10153: A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member. 99999: CVE-2019-10153 fence-agents: mis-handling of non-ASCII characters in guest comment fields

Fixed packages 41

ReleasePackageFixed in
Amazon Linux · 2 fence-agents-aliyun 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-all 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-amt-ws 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-apc 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-apc-snmp 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-aws 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-bladecenter 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-brocade 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-cisco-mds 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-cisco-ucs 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-common 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-compute 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-debuginfo 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-drac5 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-eaton-snmp 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-emerson 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-eps 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-gce 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-heuristics-ping 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-hpblade 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-ibmblade 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-ifmib 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-ilo-moonshot 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-ilo-mp 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-ilo-ssh 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-ilo2 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-intelmodular 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-ipdu 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-ipmilan 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-kdump 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-mpath 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-redfish 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-rhevm 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-rsa 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-rsb 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-sbd 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-scsi 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-virsh 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-vmware-rest 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-vmware-soap 0:4.2.1-24.amzn2.0.3
Amazon Linux · 2 fence-agents-wti 0:4.2.1-24.amzn2.0.3

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-10153.html