- Issued:
- 2024-06-11
- Updated:
- 2024-06-11
RHSA-2024:3820 - Moderate: fence-agents security update
Synopsis
Moderate: fence-agents security update
Type/Severity
Security Advisory Moderate
Topic
An update for fence-agents is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
- jinja2: accepts keys containing non-attribute characters (CVE-2024-34064)
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat Enterprise Linux for x86_64 | 9 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions | 9.6 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions | 9.4 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Extended Update Support | 9.6 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Extended Update Support | 9.4 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Extended Life Cycle | 9.6 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Extended Life Cycle | 9.4 | x86_64 |
| Red Hat Enterprise Linux for Power, little endian | 9 | ppc64le |
| Red Hat Enterprise Linux for Power, little endian - Extended Update Support | 9.6 | ppc64le |
| Red Hat Enterprise Linux for Power, little endian - Extended Update Support | 9.4 | ppc64le |
| Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle | 9.6 | ppc64le |
| Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle | 9.4 | ppc64le |
| Red Hat Enterprise Linux for IBM z Systems | 9 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - Extended Update Support | 9.6 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - Extended Update Support | 9.4 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle | 9.6 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle | 9.4 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - 4 years of updates | 9.6 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - 4 years of updates | 9.4 | s390x |
| Red Hat Enterprise Linux for ARM 64 | 9 | aarch64 |
| Red Hat Enterprise Linux for ARM 64 - Extended Update Support | 9.6 | aarch64 |
| Red Hat Enterprise Linux for ARM 64 - Extended Update Support | 9.4 | aarch64 |
| Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle | 9.6 | aarch64 |
| Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle | 9.4 | aarch64 |
| Red Hat Enterprise Linux for ARM 64 - 4 years of updates | 9.6 | aarch64 |
| Red Hat Enterprise Linux for ARM 64 - 4 years of updates | 9.4 | aarch64 |
| Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions | 9.6 | ppc64le |
| Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions | 9.4 | ppc64le |
| Red Hat Enterprise Linux Server - AUS | 9.6 | x86_64 |
| Red Hat Enterprise Linux Server - AUS | 9.4 | x86_64 |
| Red Hat Enterprise Linux Resilient Storage for x86_64 | 9 | x86_64 |
| Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Update Support | 9.6 | x86_64 |
| Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Update Support | 9.4 | x86_64 |
| Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle | 9.6 | x86_64 |
| Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle | 9.4 | x86_64 |
| Red Hat Enterprise Linux Resilient Storage for x86_64 - 4 years of updates | 9.6 | x86_64 |
| Red Hat Enterprise Linux Resilient Storage for x86_64 - 4 years of updates | 9.4 | x86_64 |
| Red Hat Enterprise Linux Resilient Storage for Power, little endian | 9 | ppc64le |
| Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Update Support | 9.6 | ppc64le |
| Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Update Support | 9.4 | ppc64le |
| Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle | 9.6 | ppc64le |
| Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle | 9.4 | ppc64le |
| Red Hat Enterprise Linux Resilient Storage for Power, little endian - 4 years of updates | 9.6 | ppc64le |
| Red Hat Enterprise Linux Resilient Storage for Power, little endian - 4 years of updates | 9.4 | ppc64le |
| Red Hat Enterprise Linux Resilient Storage for IBM z Systems | 9 | s390x |
| Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Update Support | 9.6 | s390x |
| Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Update Support | 9.4 | s390x |
| Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle | 9.6 | s390x |
| Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle | 9.4 | s390x |
| Red Hat Enterprise Linux Resilient Storage for IBM z Systems - 4 years of updates | 9.6 | s390x |
| Red Hat Enterprise Linux Resilient Storage for IBM z Systems - 4 years of updates | 9.4 | s390x |
| Red Hat Enterprise Linux High Availability for x86_64 | 9 | x86_64 |
| Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions | 9.6 | x86_64 |
| Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions | 9.4 | x86_64 |
| Red Hat Enterprise Linux High Availability for x86_64 - Extended Update Support | 9.6 | x86_64 |
| Red Hat Enterprise Linux High Availability for x86_64 - Extended Update Support | 9.4 | x86_64 |
| Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle | 9.6 | x86_64 |
| Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle | 9.4 | x86_64 |
| Red Hat Enterprise Linux High Availability for Power, little endian | 9 | ppc64le |
| Red Hat Enterprise Linux High Availability for Power, little endian - Extended Update Support | 9.6 | ppc64le |
| Red Hat Enterprise Linux High Availability for Power, little endian - Extended Update Support | 9.4 | ppc64le |
| Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle | 9.6 | ppc64le |
| Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle | 9.4 | ppc64le |
| Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions | 9.6 | ppc64le |
| Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions | 9.4 | ppc64le |
| Red Hat Enterprise Linux High Availability for IBM z Systems | 9 | s390x |
| Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle | 9.6 | s390x |
| Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle | 9.4 | s390x |
| Red Hat Enterprise Linux High Availability for IBM z Systems - 4 years of updates | 9.6 | s390x |
| Red Hat Enterprise Linux High Availability for IBM z Systems - 4 years of updates | 9.4 | s390x |
| Red Hat Enterprise Linux High Availability for ARM 64 | 9 | aarch64 |
| Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle | 9.6 | aarch64 |
| Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle | 9.4 | aarch64 |
| Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates | 9.6 | aarch64 |
| Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates | 9.4 | aarch64 |
| Red Hat Enterprise Linux High Availability (for IBM z Systems) - Extended Update Support | 9.6 | s390x |
| Red Hat Enterprise Linux High Availability (for IBM z Systems) - Extended Update Support | 9.4 | s390x |
| Red Hat Enterprise Linux High Availability (for ARM 64) - Extended Update Support | 9.6 | aarch64 |
| Red Hat Enterprise Linux High Availability (for ARM 64) - Extended Update Support | 9.4 | aarch64 |
Updated Packages
- fence-agents-kubevirt-debuginfo-4.10.0-62.el9_4.3.aarch64.rpm
- fence-agents-kubevirt-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-debugsource-4.10.0-62.el9_4.3.aarch64.rpm
- fence-agents-eaton-snmp-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-kdump-4.10.0-62.el9_4.3.aarch64.rpm
- fence-agents-kubevirt-4.10.0-62.el9_4.3.s390x.rpm
- fence-agents-emerson-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-ilo-mp-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-debuginfo-4.10.0-62.el9_4.3.aarch64.rpm
- fence-agents-kdump-4.10.0-62.el9_4.3.s390x.rpm
- fence-agents-apc-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-lpar-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-brocade-4.10.0-62.el9_4.3.noarch.rpm
- fence-virtd-serial-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-all-4.10.0-62.el9_4.3.aarch64.rpm
- fence-agents-cisco-ucs-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-vmware-soap-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-redfish-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-scsi-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-redfish-4.10.0-62.el9_4.3.ppc64le.rpm
- fence-agents-ibmblade-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-ilo-ssh-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-kubevirt-4.10.0-62.el9_4.3.aarch64.rpm
- fence-agents-kubevirt-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- fence-virtd-multicast-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- fence-virtd-libvirt-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-all-4.10.0-62.el9_4.3.ppc64le.rpm
- fence-agents-mpath-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-kdump-debuginfo-4.10.0-62.el9_4.3.s390x.rpm
- fence-agents-cisco-mds-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-openstack-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-rsa-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-drac5-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-kdump-4.10.0-62.el9_4.3.x86_64.rpm
- fence-virtd-serial-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-azure-arm-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-aws-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-common-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-debuginfo-4.10.0-62.el9_4.3.s390x.rpm
- fence-agents-openstack-4.10.0-62.el9_4.3.ppc64le.rpm
- fence-virt-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-ifmib-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-kdump-debuginfo-4.10.0-62.el9_4.3.ppc64le.rpm
- fence-virtd-tcp-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-ibm-vpc-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-vmware-rest-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-kubevirt-debuginfo-4.10.0-62.el9_4.3.ppc64le.rpm
- fence-agents-ipmilan-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-virsh-4.10.0-62.el9_4.3.noarch.rpm
- fence-virtd-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- ha-cloud-support-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-ilo2-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-kdump-4.10.0-62.el9_4.3.ppc64le.rpm
- fence-virtd-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-apc-snmp-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-debugsource-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-hpblade-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-4.10.0-62.el9_4.3.src.rpm
- fence-agents-redfish-4.10.0-62.el9_4.3.s390x.rpm
- fence-agents-bladecenter-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-compute-4.10.0-62.el9_4.3.ppc64le.rpm
- fence-agents-rsb-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-zvm-4.10.0-62.el9_4.3.s390x.rpm
- fence-virtd-tcp-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-gce-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-kubevirt-4.10.0-62.el9_4.3.ppc64le.rpm
- fence-agents-ibm-powervs-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-all-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-aliyun-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-amt-ws-4.10.0-62.el9_4.3.noarch.rpm
- fence-virt-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-kdump-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-all-4.10.0-62.el9_4.3.s390x.rpm
- fence-agents-debuginfo-4.10.0-62.el9_4.3.ppc64le.rpm
- fence-agents-debugsource-4.10.0-62.el9_4.3.s390x.rpm
- fence-agents-ilo-moonshot-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-heuristics-ping-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-kubevirt-debuginfo-4.10.0-62.el9_4.3.s390x.rpm
- fence-virtd-cpg-4.10.0-62.el9_4.3.x86_64.rpm
- fence-virtd-cpg-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-sbd-4.10.0-62.el9_4.3.noarch.rpm
- fence-virtd-multicast-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-eps-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-rhevm-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-debugsource-4.10.0-62.el9_4.3.ppc64le.rpm
- fence-agents-ipdu-4.10.0-62.el9_4.3.noarch.rpm
- fence-agents-compute-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-intelmodular-4.10.0-62.el9_4.3.noarch.rpm
- fence-virtd-libvirt-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-wti-4.10.0-62.el9_4.3.noarch.rpm
- ha-cloud-support-debuginfo-4.10.0-62.el9_4.3.x86_64.rpm
- fence-agents-kdump-debuginfo-4.10.0-62.el9_4.3.aarch64.rpm
- fence-agents-redfish-4.10.0-62.el9_4.3.aarch64.rpm
Fixes
CVEs
References
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.