Skip to content
OpenAdvisories
High RLSA-2025:0308 0 CVEs

Important: fence-agents security update

Published Mar 17, 2025 · Updated Feb 5, 2026

Summary

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

Security Fix(es):

* fence-agents: Jinja has a sandbox breakout through indirect reference to format method [rhel-9.5.z] (CVE-2024-56326)

* fence-agents: Jinja has a sandbox breakout through malicious filenames [rhel-9.5.z] (CVE-2024-56201)

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 fence-agents 0:4.10.0-76.el9_5.4