Summary
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves (CVE-2026-26007)
* pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)
* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 48
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | fence-agents-aliyun | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-all | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-amt-ws | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-apc | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-apc-snmp | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-aws | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-azure-arm | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-bladecenter | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-brocade | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-cisco-mds | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-cisco-ucs | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-common | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-compute | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-drac5 | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-eaton-snmp | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-emerson | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-eps | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-gce | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-heuristics-ping | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-hpblade | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-ibm-powervs | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-ibm-vpc | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-ibmblade | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-ifmib | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-ilo-moonshot | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-ilo-mp | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-ilo-ssh | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-ilo2 | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-intelmodular | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-ipdu | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-ipmilan | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-kdump | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-kubevirt | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-lpar | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-mpath | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-nutanix-ahv | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-openstack | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-redfish | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-rhevm | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-rsa | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-rsb | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-sbd | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-scsi | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-virsh | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-vmware-rest | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-vmware-soap | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-wti | 4.2.1-129.el8_10.25 |
| AlmaLinux · 8 | fence-agents-zvm | 4.2.1-129.el8_10.25 |
Vulnerabilities 3
-
High 8.2
cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() a…
-
High 7.5
pyasn1 Vulnerable to Denial of Service via Unbounded Recursion
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payl…
-
High 7.5
PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the librar…
References
-
report
https://access.redhat.com/security/cve/CVE-2026-26007
-
report
https://access.redhat.com/security/cve/CVE-2026-30922
-
report
https://access.redhat.com/security/cve/CVE-2026-32597
-
report
https://bugzilla.redhat.com/2438762
-
report
https://bugzilla.redhat.com/2447194
-
report
https://bugzilla.redhat.com/2448553
-
advisory
https://errata.almalinux.org/8/ALSA-2026-12176.html