Summary
[4.10.0-62.3]
- bundled jinja2: fix CVE-2024-34064
Resolves: RHEL-36482
[4.10.0-62.2]
- fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
Resolves: RHEL-35273
[4.10.0-62.1]
- ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
gcp-vpc-move-route's stop-action
Resolves: RHEL-29668
Fixed packages 48
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | fence-agents-all | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-amt-ws | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-apc | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-apc-snmp | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-bladecenter | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-brocade | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-cisco-mds | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-cisco-ucs | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-common | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-compute | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-drac5 | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-eaton-snmp | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-emerson | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-eps | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-heuristics-ping | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-hpblade | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-ibm-powervs | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-ibm-vpc | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-ibmblade | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-ifmib | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-ilo-moonshot | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-ilo-mp | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-ilo-ssh | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-ilo2 | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-intelmodular | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-ipdu | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-ipmilan | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-kdump | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-kubevirt | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-lpar | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-mpath | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-redfish | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-rhevm | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-rsa | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-rsb | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-sbd | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-scsi | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-virsh | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-vmware-rest | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-vmware-soap | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-agents-wti | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-virt | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-virtd | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-virtd-cpg | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-virtd-libvirt | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-virtd-multicast | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-virtd-serial | 0:4.10.0-62.el9_4.3 |
| Oracle Linux · 9 | fence-virtd-tcp | 0:4.10.0-62.el9_4.3 |
Vulnerabilities 1
-
Medium 5.4CVE-2024-34064 Public exploit
Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
Jinja is an extensible templating engine. The `xmlattr` filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, `/`, `>`, or `=`, as each would then be interpreted as starting a separat…