RHSA-2024:4422

Security

Issued at: 2024-07-09

Synopsis

Moderate: fence-agents security update

Description

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

Security Fix(es):

* urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Red Hat Enterprise Linux for ARM 64 - 9 Red Hat Enterprise Linux for IBM z Systems - 9 Red Hat Enterprise Linux for Power, little endian - 9 Red Hat Enterprise Linux for x86_64 - 9

Fixes

2292788

CVEs

CVE-2024-37891

Affected packages

fence-agents-0:4.10.0-62.el9_4.4.src fence-agents-aliyun-0:4.10.0-62.el9_4.4.x86_64 fence-agents-all-0:4.10.0-62.el9_4.4.aarch64 fence-agents-all-0:4.10.0-62.el9_4.4.ppc64le fence-agents-all-0:4.10.0-62.el9_4.4.s390x fence-agents-all-0:4.10.0-62.el9_4.4.x86_64 fence-agents-amt-ws-0:4.10.0-62.el9_4.4.noarch fence-agents-apc-0:4.10.0-62.el9_4.4.noarch fence-agents-apc-snmp-0:4.10.0-62.el9_4.4.noarch fence-agents-aws-0:4.10.0-62.el9_4.4.x86_64 fence-agents-azure-arm-0:4.10.0-62.el9_4.4.x86_64 fence-agents-bladecenter-0:4.10.0-62.el9_4.4.noarch fence-agents-brocade-0:4.10.0-62.el9_4.4.noarch fence-agents-cisco-mds-0:4.10.0-62.el9_4.4.noarch fence-agents-cisco-ucs-0:4.10.0-62.el9_4.4.noarch fence-agents-common-0:4.10.0-62.el9_4.4.noarch fence-agents-compute-0:4.10.0-62.el9_4.4.ppc64le fence-agents-compute-0:4.10.0-62.el9_4.4.x86_64 fence-agents-debuginfo-0:4.10.0-62.el9_4.4.aarch64 fence-agents-debuginfo-0:4.10.0-62.el9_4.4.ppc64le fence-agents-debuginfo-0:4.10.0-62.el9_4.4.s390x fence-agents-debuginfo-0:4.10.0-62.el9_4.4.x86_64 fence-agents-debugsource-0:4.10.0-62.el9_4.4.aarch64 fence-agents-debugsource-0:4.10.0-62.el9_4.4.ppc64le fence-agents-debugsource-0:4.10.0-62.el9_4.4.s390x fence-agents-debugsource-0:4.10.0-62.el9_4.4.x86_64 fence-agents-drac5-0:4.10.0-62.el9_4.4.noarch fence-agents-eaton-snmp-0:4.10.0-62.el9_4.4.noarch fence-agents-emerson-0:4.10.0-62.el9_4.4.noarch fence-agents-eps-0:4.10.0-62.el9_4.4.noarch fence-agents-gce-0:4.10.0-62.el9_4.4.x86_64 fence-agents-heuristics-ping-0:4.10.0-62.el9_4.4.noarch fence-agents-hpblade-0:4.10.0-62.el9_4.4.noarch fence-agents-ibmblade-0:4.10.0-62.el9_4.4.noarch fence-agents-ibm-powervs-0:4.10.0-62.el9_4.4.noarch fence-agents-ibm-vpc-0:4.10.0-62.el9_4.4.noarch fence-agents-ifmib-0:4.10.0-62.el9_4.4.noarch fence-agents-ilo2-0:4.10.0-62.el9_4.4.noarch fence-agents-ilo-moonshot-0:4.10.0-62.el9_4.4.noarch fence-agents-ilo-mp-0:4.10.0-62.el9_4.4.noarch fence-agents-ilo-ssh-0:4.10.0-62.el9_4.4.noarch fence-agents-intelmodular-0:4.10.0-62.el9_4.4.noarch fence-agents-ipdu-0:4.10.0-62.el9_4.4.noarch fence-agents-ipmilan-0:4.10.0-62.el9_4.4.noarch fence-agents-kdump-0:4.10.0-62.el9_4.4.aarch64 fence-agents-kdump-0:4.10.0-62.el9_4.4.ppc64le fence-agents-kdump-0:4.10.0-62.el9_4.4.s390x fence-agents-kdump-0:4.10.0-62.el9_4.4.x86_64 fence-agents-kdump-debuginfo-0:4.10.0-62.el9_4.4.aarch64 fence-agents-kdump-debuginfo-0:4.10.0-62.el9_4.4.ppc64le fence-agents-kdump-debuginfo-0:4.10.0-62.el9_4.4.s390x fence-agents-kdump-debuginfo-0:4.10.0-62.el9_4.4.x86_64 fence-agents-kubevirt-0:4.10.0-62.el9_4.4.aarch64 fence-agents-kubevirt-0:4.10.0-62.el9_4.4.ppc64le fence-agents-kubevirt-0:4.10.0-62.el9_4.4.s390x fence-agents-kubevirt-0:4.10.0-62.el9_4.4.x86_64 fence-agents-kubevirt-debuginfo-0:4.10.0-62.el9_4.4.aarch64 fence-agents-kubevirt-debuginfo-0:4.10.0-62.el9_4.4.ppc64le fence-agents-kubevirt-debuginfo-0:4.10.0-62.el9_4.4.s390x fence-agents-kubevirt-debuginfo-0:4.10.0-62.el9_4.4.x86_64 fence-agents-lpar-0:4.10.0-62.el9_4.4.noarch fence-agents-mpath-0:4.10.0-62.el9_4.4.noarch fence-agents-openstack-0:4.10.0-62.el9_4.4.ppc64le fence-agents-openstack-0:4.10.0-62.el9_4.4.x86_64 fence-agents-redfish-0:4.10.0-62.el9_4.4.aarch64 fence-agents-redfish-0:4.10.0-62.el9_4.4.ppc64le fence-agents-redfish-0:4.10.0-62.el9_4.4.s390x fence-agents-redfish-0:4.10.0-62.el9_4.4.x86_64 fence-agents-rhevm-0:4.10.0-62.el9_4.4.noarch fence-agents-rsa-0:4.10.0-62.el9_4.4.noarch fence-agents-rsb-0:4.10.0-62.el9_4.4.noarch fence-agents-sbd-0:4.10.0-62.el9_4.4.noarch fence-agents-scsi-0:4.10.0-62.el9_4.4.noarch fence-agents-virsh-0:4.10.0-62.el9_4.4.noarch fence-agents-vmware-rest-0:4.10.0-62.el9_4.4.noarch fence-agents-vmware-soap-0:4.10.0-62.el9_4.4.noarch fence-agents-wti-0:4.10.0-62.el9_4.4.noarch fence-agents-zvm-0:4.10.0-62.el9_4.4.s390x fence-virt-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-cpg-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-cpg-debuginfo-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-debuginfo-0:4.10.0-62.el9_4.4.x86_64 fence-virt-debuginfo-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-libvirt-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-libvirt-debuginfo-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-multicast-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-multicast-debuginfo-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-serial-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-serial-debuginfo-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-tcp-0:4.10.0-62.el9_4.4.x86_64 fence-virtd-tcp-debuginfo-0:4.10.0-62.el9_4.4.x86_64 ha-cloud-support-0:4.10.0-62.el9_4.4.x86_64 ha-cloud-support-debuginfo-0:4.10.0-62.el9_4.4.x86_64