RHBA-2024:1114 — Red Hat Bug Fix Advisory: fence-agents bug fix update

Fixed packages 66

Release	Package	Fixed in
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-aliyun-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-all	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-amt-ws	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-apc	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-apc-snmp	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-bladecenter	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-brocade	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-cisco-mds	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-cisco-ucs	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-common	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-compute	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-debugsource	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-drac5	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-eaton-snmp	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-emerson	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-eps	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-heuristics-ping	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-hpblade	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-ibm-powervs	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-ibm-vpc	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-ibmblade	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-ifmib	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-ilo-moonshot	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-ilo-mp	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-ilo-ssh	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-ilo2	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-intelmodular	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-ipdu	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-ipmilan	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-kdump	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-kdump-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-kubevirt	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-kubevirt-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-lpar	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-mpath	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-redfish	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-rhevm	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-rsa	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-rsb	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-sbd	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-scsi	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-virsh	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-vmware-rest	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-vmware-soap	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-wti	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream	fence-agents-zvm	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::highavailability	fence-agents-aliyun	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::highavailability	fence-agents-aliyun-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::highavailability	fence-agents-aws	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::highavailability	fence-agents-azure-arm	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::highavailability	fence-agents-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::highavailability	fence-agents-debugsource	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::highavailability	fence-agents-gce	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::highavailability	fence-agents-kdump-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::highavailability	fence-agents-kubevirt-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::resilientstorage	fence-agents-aliyun	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::resilientstorage	fence-agents-aliyun-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::resilientstorage	fence-agents-aws	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::resilientstorage	fence-agents-azure-arm	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::resilientstorage	fence-agents-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::resilientstorage	fence-agents-debugsource	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::resilientstorage	fence-agents-gce	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::resilientstorage	fence-agents-kdump-debuginfo	0:4.2.1-89.el8_6.11
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::resilientstorage	fence-agents-kubevirt-debuginfo	0:4.2.1-89.el8_6.11

Vulnerabilities 3

Medium 5.9

CVE-2023-52323

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

jwt-tool pycryptodome pycryptodome pycryptodome Debian Ubuntu Wolfi PyPI

Jan 5, 2024
Medium 5.4

CVE-2024-22195

Jinja vulnerable to Cross-Site Scripting (XSS)

Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). …

pallets jinja nodejs kubeflow-pipelines-visualization-server Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Jan 11, 2024
Medium 4.2

CVE-2023-45803

Request body not stripped after redirect in urllib3

urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body…

urllib3 urllib3 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Oct 17, 2023

References

advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_1114.json
report
https://access.redhat.com/security/cve/CVE-2023-45803
report
https://bugzilla.redhat.com/show_bug.cgi?id=2246840
advisory
https://www.cve.org/CVERecord?id=CVE-2023-45803
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-45803
article
https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9
article
https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4
article
https://www.rfc-editor.org/rfc/rfc9110.html#name-get
report
https://access.redhat.com/security/cve/CVE-2023-52323
report
https://bugzilla.redhat.com/show_bug.cgi?id=2257028
advisory
https://www.cve.org/CVERecord?id=CVE-2023-52323
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-52323
article
https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst
article
https://pypi.org/project/pycryptodomex/#history
report
https://access.redhat.com/security/cve/CVE-2024-22195
report
https://bugzilla.redhat.com/show_bug.cgi?id=2257854
advisory
https://www.cve.org/CVERecord?id=CVE-2024-22195
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-22195
article
https://github.com/pallets/jinja/releases/tag/3.1.3
article
https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95

Red Hat Bug Fix Advisory: fence-agents bug fix update

Fixed packages 66

Vulnerabilities 3

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

Jinja vulnerable to Cross-Site Scripting (XSS)

Request body not stripped after redirect in urllib3

References