Skip to content
OpenAdvisories
High ALSA-2026:1905 1 CVE

Important: fence-agents security update

Published Feb 4, 2026 · Updated Oct 29, 2026

Summary

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

Security Fix(es):

* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 36

ReleasePackageFixed in
AlmaLinux · 10 fence-agents-amt-ws 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-apc 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-apc-snmp 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-bladecenter 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-brocade 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-cisco-mds 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-cisco-ucs 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-drac5 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-eaton-snmp 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-emerson 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-eps 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-heuristics-ping 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-hpblade 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-ibm-powervs 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-ibm-vpc 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-ibmblade 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-ifmib 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-ilo-moonshot 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-ilo-mp 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-ilo-ssh 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-ilo2 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-intelmodular 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-ipdu 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-ipmilan 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-lpar 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-mpath 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-nutanix-ahv 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-rhevm 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-rsa 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-rsb 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-sbd 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-scsi 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-virsh 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-vmware-rest 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-vmware-soap 4.16.0-13.el10_1.2
AlmaLinux · 10 fence-agents-wti 4.16.0-13.el10_1.2

Vulnerabilities 1

  • High 7.5

    pyasn1 has a DoS vulnerability in decoder

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-23490
  • report
    https://bugzilla.redhat.com/2430472
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-1905.html