Skip to content
OpenAdvisories
Medium RLSA-2025:11463 1 CVE

Moderate: fence-agents security update

Published Oct 4, 2025 · Updated Oct 4, 2025

Ecosystem: Rocky Linux

Summary

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

Security Fix(es):

* setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 fence-agents 0:4.10.0-86.el9_6.7

Vulnerabilities 1

  • High 7.7
    CVE-2025-47273 Public exploit

    setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

    setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to ar…

    pypa setuptools kserve-storage-controller datadog-agent-7.77 Debian Ubuntu Azure Linux Wolfi PyPI

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2366982