Skip to content
OpenAdvisories
High RHSA-2026:13916 2 CVEs

Red Hat Security Advisory: fence-agents security update

Published May 6, 2026 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 68

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-aliyun 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-all 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-amt-ws 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-apc 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-apc-snmp 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-aws 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-azure-arm 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-bladecenter 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-brocade 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-cisco-mds 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-cisco-ucs 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-common 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-common-debuginfo 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-debuginfo 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-debugsource 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-drac5 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-eaton-snmp 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-emerson 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-eps 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-gce 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-heuristics-ping 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-hpblade 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-ibm-powervs 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-ibm-vpc 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-ibmblade 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-ifmib 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-ilo-moonshot 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-ilo-mp 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-ilo-ssh 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-ilo2 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-intelmodular 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-ipdu 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-ipmilan 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-kdump 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-kdump-debuginfo 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-kubevirt 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-lpar 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-mpath 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-nutanix-ahv 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-openstack 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-redfish 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-rhevm 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-rsa 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-rsb 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-sbd 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-scsi 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-virsh 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-vmware-rest 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-vmware-soap 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-wti 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-agents-zvm 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virt 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virt-debuginfo 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-cpg 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-cpg-debuginfo 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-debuginfo 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-libvirt 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-libvirt-debuginfo 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-multicast 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-multicast-debuginfo 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-serial 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-serial-debuginfo 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-tcp 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 fence-virtd-tcp-debuginfo 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 ha-cloud-support 0:4.16.0-13.el10_1.4
Red Hat · RHEL 10 enterprise_linux:10.1 ha-cloud-support-debuginfo 0:4.16.0-13.el10_1.4

Vulnerabilities 2

  • High 7.5
    CVE-2026-30922

    pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payl…

    pyasn1 pyasn1 kubeflow-pipelines-apiserver airflow-3 Debian Ubuntu Azure Linux Wolfi PyPI
  • High 7.5
    CVE-2026-32597

    PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

    PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the librar…

    jpadilla pyjwt open-webui airflow-3 Debian Ubuntu Azure Linux Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2447194
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2448553
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13916.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-30922
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-30922
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-30922
  • article
    https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0
  • article
    https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r
  • report
    https://access.redhat.com/security/cve/CVE-2026-32597
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-32597
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-32597
  • article
    https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f