Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux fence‑agents may run unwanted code
published 2 years ago
Summary
The fence‑agents packages used for remote power control on AlmaLinux can be tricked into executing malicious code. This could let an attacker restart or remove cluster nodes without permission. Apply the latest security updates for the listed fence‑agents packages as soon as possible.
What to do
- Update almalinux fence-agents-rsb to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-aliyun to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-all to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-amt-ws to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-apc to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-apc-snmp to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-aws to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-azure-arm to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-bladecenter to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-brocade to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-cisco-mds to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-cisco-ucs to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-common to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-compute to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-drac5 to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-eaton-snmp to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-emerson to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-eps to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-gce to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-heuristics-ping to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-hpblade to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-ibm-powervs to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-ibm-vpc to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-ibmblade to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-ifmib to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-ilo-moonshot to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-ilo-mp to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-ilo-ssh to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-ilo2 to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-intelmodular to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-ipdu to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-ipmilan to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-kdump to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-kubevirt to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-lpar to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-mpath to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-openstack to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-redfish to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-rhevm to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-rsa to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-sbd to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-scsi to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-virsh to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-vmware-rest to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-vmware-soap to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-wti to version 4.2.1-129.el8_10.4.
- Update almalinux fence-agents-zvm to version 4.2.1-129.el8_10.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | fence-agents-rsb |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-aliyun |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-all |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-amt-ws |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-apc |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-apc-snmp |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-aws |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-azure-arm |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-bladecenter |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-brocade |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-cisco-mds |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-cisco-ucs |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-common |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-compute |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-drac5 |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-eaton-snmp |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-emerson |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-eps |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-gce |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-heuristics-ping |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-hpblade |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-ibm-powervs |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-ibm-vpc |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-ibmblade |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-ifmib |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-ilo-moonshot |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-ilo-mp |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-ilo-ssh |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-ilo2 |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-intelmodular |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-ipdu |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-ipmilan |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-kdump |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-kubevirt |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-lpar |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-mpath |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-openstack |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-redfish |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-rhevm |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-rsa |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-sbd |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-scsi |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-virsh |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-vmware-rest |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-vmware-soap |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-wti |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
| AlmaLinux:8 | almalinux | fence-agents-zvm |
< 4.2.1-129.el8_10.4 Fix: upgrade to 4.2.1-129.el8_10.4
|
Original advisory text
Moderate: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)
* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)
* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2024:6309 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-37891 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-6345 Third Party Advisory
- https://bugzilla.redhat.com/2292788 Third Party Advisory
- https://bugzilla.redhat.com/2297771 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2024-6309.html Vendor Advisory
Timeline
Published4 Sep 2024
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2024:6309 · OSV
Track software like this
Free during beta