RHBA-2024:1416 — Red Hat Bug Fix Advisory: fence-agents update

Fixed packages 68

Release	Package	Fixed in
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-aliyun-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-all	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-amt-ws	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-apc	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-apc-snmp	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-bladecenter	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-brocade	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-cisco-mds	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-cisco-ucs	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-common	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-compute	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-debugsource	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-drac5	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-eaton-snmp	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-emerson	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-eps	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-heuristics-ping	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-hpblade	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-ibm-powervs	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-ibm-vpc	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-ibmblade	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-ifmib	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-ilo-moonshot	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-ilo-mp	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-ilo-ssh	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-ilo2	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-intelmodular	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-ipdu	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-ipmilan	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-kdump	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-kdump-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-kubevirt	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-kubevirt-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-lpar	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-mpath	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-redfish	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-rhevm	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-rsa	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-rsb	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-sbd	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-scsi	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-virsh	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-vmware-rest	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-vmware-soap	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-wti	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream	fence-agents-zvm	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::highavailability	fence-agents-aliyun	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::highavailability	fence-agents-aliyun-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::highavailability	fence-agents-aws	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::highavailability	fence-agents-azure-arm	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::highavailability	fence-agents-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::highavailability	fence-agents-debugsource	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::highavailability	fence-agents-gce	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::highavailability	fence-agents-kdump-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::highavailability	fence-agents-kubevirt-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::highavailability	fence-agents-openstack	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::resilientstorage	fence-agents-aliyun	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::resilientstorage	fence-agents-aliyun-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::resilientstorage	fence-agents-aws	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::resilientstorage	fence-agents-azure-arm	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::resilientstorage	fence-agents-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::resilientstorage	fence-agents-debugsource	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::resilientstorage	fence-agents-gce	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::resilientstorage	fence-agents-kdump-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::resilientstorage	fence-agents-kubevirt-debuginfo	0:4.2.1-112.el8_8.3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::resilientstorage	fence-agents-openstack	0:4.2.1-112.el8_8.3

Vulnerabilities 2

Medium 5.9

CVE-2023-52323

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

jwt-tool pycryptodome pycryptodome pycryptodome Debian Ubuntu Wolfi PyPI

Jan 5, 2024
Medium 5.4

CVE-2024-22195

Jinja vulnerable to Cross-Site Scripting (XSS)

Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). …

pallets jinja nodejs kubeflow-pipelines-visualization-server Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Jan 11, 2024

References

advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_1416.json
report
https://access.redhat.com/security/cve/CVE-2023-52323
report
https://bugzilla.redhat.com/show_bug.cgi?id=2257028
advisory
https://www.cve.org/CVERecord?id=CVE-2023-52323
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-52323
article
https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst
article
https://pypi.org/project/pycryptodomex/#history
report
https://access.redhat.com/security/cve/CVE-2024-22195
report
https://bugzilla.redhat.com/show_bug.cgi?id=2257854
advisory
https://www.cve.org/CVERecord?id=CVE-2024-22195
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-22195
article
https://github.com/pallets/jinja/releases/tag/3.1.3
article
https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95

Red Hat Bug Fix Advisory: fence-agents update

Fixed packages 68

Vulnerabilities 2

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

Jinja vulnerable to Cross-Site Scripting (XSS)

References