Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Red Hat Resource Agents Security Flaw Allows Unauthorized Access
published 9 months ago
Summary
A security update is available for Red Hat Resource Agents, a tool used to manage system resources. This update fixes a security issue that could allow an attacker to gain unauthorized access to your system. You should update your Resource Agents to the latest version to prevent potential security risks.
What to do
- Update redhat resource-agents to version 0:4.1.1-61.el7_9.21.
- Update redhat resource-agents-aliyun to version 0:4.1.1-61.el7_9.21.
- Update redhat resource-agents-debuginfo to version 0:4.1.1-61.el7_9.21.
- Update redhat resource-agents-gcp to version 0:4.1.1-61.el7_9.21.
- Update redhat resource-agents-sap to version 0:4.1.1-61.el7_9.21.
- Update redhat resource-agents-sap-hana to version 0:4.1.1-61.el7_9.21.
- Update redhat resource-agents-sap-hana-scaleout to version 0:0.164.0-6.el7_9.21.
- Update redhat sap-cluster-connector to version 0:3.0.1-37.el7_9.21.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:7::server | redhat | resource-agents |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:enterprise_linux:7::server | redhat | resource-agents-aliyun |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:enterprise_linux:7::server | redhat | resource-agents-debuginfo |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:enterprise_linux:7::server | redhat | resource-agents-gcp |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:enterprise_linux:7::server | redhat | resource-agents-sap |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:enterprise_linux:7::server | redhat | resource-agents-sap-hana |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:enterprise_linux:7::server | redhat | resource-agents-sap-hana-scaleout |
< 0:0.164.0-6.el7_9.21 Fix: upgrade to 0:0.164.0-6.el7_9.21
|
| Red Hat:enterprise_linux:7::server | redhat | sap-cluster-connector |
< 0:3.0.1-37.el7_9.21 Fix: upgrade to 0:3.0.1-37.el7_9.21
|
| Red Hat:rhel_extras_sap_els:7 | redhat | resource-agents |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_els:7 | redhat | resource-agents-aliyun |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_els:7 | redhat | resource-agents-debuginfo |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_els:7 | redhat | resource-agents-gcp |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_els:7 | redhat | resource-agents-sap |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_els:7 | redhat | resource-agents-sap-hana |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_els:7 | redhat | resource-agents-sap-hana-scaleout |
< 0:0.164.0-6.el7_9.21 Fix: upgrade to 0:0.164.0-6.el7_9.21
|
| Red Hat:rhel_extras_sap_els:7 | redhat | sap-cluster-connector |
< 0:3.0.1-37.el7_9.21 Fix: upgrade to 0:3.0.1-37.el7_9.21
|
| Red Hat:rhel_extras_sap_hana_els:7 | redhat | resource-agents |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_hana_els:7 | redhat | resource-agents-aliyun |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_hana_els:7 | redhat | resource-agents-debuginfo |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_hana_els:7 | redhat | resource-agents-gcp |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_hana_els:7 | redhat | resource-agents-sap |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_hana_els:7 | redhat | resource-agents-sap-hana |
< 0:4.1.1-61.el7_9.21 Fix: upgrade to 0:4.1.1-61.el7_9.21
|
| Red Hat:rhel_extras_sap_hana_els:7 | redhat | resource-agents-sap-hana-scaleout |
< 0:0.164.0-6.el7_9.21 Fix: upgrade to 0:0.164.0-6.el7_9.21
|
| Red Hat:rhel_extras_sap_hana_els:7 | redhat | sap-cluster-connector |
< 0:3.0.1-37.el7_9.21 Fix: upgrade to 0:3.0.1-37.el7_9.21
|
Original advisory text
Red Hat Security Advisory: resource-agents security update
References
- https://access.redhat.com/errata/RHSA-2026:1336 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2419455 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1336.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-66418 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-66418 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-66418 Vendor Advisory
- https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222... Third Party Advisory
- https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53 Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published28 Jan 2026
Updated6 Mar 2026
First seen6 Mar 2026
Sources
RHSA-2026:1336 · OSV
Track software like this
Free during beta