Summary
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* python-oauthlib: DoS when attacker provides malicious IPV6 URI (CVE-2022-36087)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 55
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | fence-agents-aliyun | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-all | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-amt-ws | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-apc | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-apc-snmp | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-aws | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-azure-arm | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-bladecenter | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-brocade | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-cisco-mds | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-cisco-ucs | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-common | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-compute | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-drac5 | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-eaton-snmp | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-emerson | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-eps | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-gce | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-heuristics-ping | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-hpblade | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-ibm-powervs | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-ibm-vpc | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-ibmblade | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-ifmib | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-ilo-moonshot | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-ilo-mp | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-ilo-ssh | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-ilo2 | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-intelmodular | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-ipdu | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-ipmilan | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-kdump | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-kubevirt | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-lpar | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-mpath | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-openstack | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-redfish | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-rhevm | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-rsa | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-rsb | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-sbd | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-scsi | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-virsh | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-vmware-rest | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-vmware-soap | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-wti | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-agents-zvm | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-virt | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-virtd | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-virtd-cpg | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-virtd-libvirt | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-virtd-multicast | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-virtd-serial | 4.10.0-43.el9 |
| AlmaLinux · 9 | fence-virtd-tcp | 4.10.0-43.el9 |
| AlmaLinux · 9 | ha-cloud-support | 4.10.0-43.el9 |
Vulnerabilities 1
-
Medium 5.7
OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions…