Summary
[4.10.0-76.6]
- fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
avoid edge-case of writing empty token file
Resolves: RHEL-83487
[4.10.0-76.5]
- bundled jinja2: fix CVE-2025-27516
Resolves: RHEL-82712
Fixed packages 48
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | fence-agents-all | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-amt-ws | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-apc | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-apc-snmp | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-bladecenter | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-brocade | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-cisco-mds | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-cisco-ucs | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-common | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-compute | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-drac5 | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-eaton-snmp | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-emerson | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-eps | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-heuristics-ping | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-hpblade | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-ibm-powervs | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-ibm-vpc | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-ibmblade | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-ifmib | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-ilo-moonshot | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-ilo-mp | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-ilo-ssh | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-ilo2 | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-intelmodular | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-ipdu | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-ipmilan | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-kdump | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-kubevirt | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-lpar | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-mpath | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-redfish | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-rhevm | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-rsa | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-rsb | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-sbd | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-scsi | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-virsh | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-vmware-rest | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-vmware-soap | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-agents-wti | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-virt | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-virtd | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-virtd-cpg | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-virtd-libvirt | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-virtd-multicast | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-virtd-serial | 0:4.10.0-76.el9_5.6 |
| Oracle Linux · 9 | fence-virtd-tcp | 0:4.10.0-76.el9_5.6 |
Vulnerabilities 1
-
Medium 5.4
Jinja sandbox breakout through attr filter selecting format method
Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerabi…