Skip to content
OpenAdvisories
High RHSA-2026:25902 1 CVE

Red Hat Security Advisory: fence-agents security update

Published Jun 15, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 68

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-aliyun 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-all 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-amt-ws 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-apc 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-apc-snmp 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-aws 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-azure-arm 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-bladecenter 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-brocade 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-cisco-mds 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-cisco-ucs 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-common 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-common-debuginfo 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-debuginfo 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-debugsource 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-drac5 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-eaton-snmp 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-emerson 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-eps 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-gce 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-heuristics-ping 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-hpblade 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-ibm-powervs 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-ibm-vpc 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-ibmblade 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-ifmib 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-ilo-moonshot 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-ilo-mp 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-ilo-ssh 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-ilo2 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-intelmodular 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-ipdu 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-ipmilan 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-kdump 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-kdump-debuginfo 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-kubevirt 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-lpar 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-mpath 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-nutanix-ahv 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-openstack 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-redfish 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-rhevm 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-rsa 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-rsb 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-sbd 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-scsi 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-virsh 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-vmware-rest 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-vmware-soap 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-wti 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-agents-zvm 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virt 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virt-debuginfo 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-cpg 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-cpg-debuginfo 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-debuginfo 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-libvirt 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-libvirt-debuginfo 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-multicast 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-multicast-debuginfo 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-serial 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-serial-debuginfo 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-tcp 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 fence-virtd-tcp-debuginfo 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 ha-cloud-support 0:4.16.0-21.el10_2.2
Red Hat · RHEL 10 enterprise_linux:10.2 ha-cloud-support-debuginfo 0:4.16.0-21.el10_2.2

Vulnerabilities 1

  • High 7.4
    CVE-2026-48526

    PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

    PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker t…

    jpadilla pyjwt kserve-storage-controller superset-6.0 Debian Ubuntu Azure Linux Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2482734
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25902.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-48526
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-48526
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-48526
  • article
    https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx