Описание
ELSA-2026-13917: fence-agents security update (IMPORTANT)
[4.10.0-98.13]
- bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157201
[4.10.0-98.12]
- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-148436, RHEL-155675
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
fence-agents-all
4.10.0-98.el9_7.13
fence-agents-amt-ws
4.10.0-98.el9_7.13
fence-agents-apc
4.10.0-98.el9_7.13
fence-agents-apc-snmp
4.10.0-98.el9_7.13
fence-agents-bladecenter
4.10.0-98.el9_7.13
fence-agents-brocade
4.10.0-98.el9_7.13
fence-agents-cisco-mds
4.10.0-98.el9_7.13
fence-agents-cisco-ucs
4.10.0-98.el9_7.13
fence-agents-common
4.10.0-98.el9_7.13
fence-agents-drac5
4.10.0-98.el9_7.13
fence-agents-eaton-snmp
4.10.0-98.el9_7.13
fence-agents-emerson
4.10.0-98.el9_7.13
fence-agents-eps
4.10.0-98.el9_7.13
fence-agents-heuristics-ping
4.10.0-98.el9_7.13
fence-agents-hpblade
4.10.0-98.el9_7.13
fence-agents-ibm-powervs
4.10.0-98.el9_7.13
fence-agents-ibm-vpc
4.10.0-98.el9_7.13
fence-agents-ibmblade
4.10.0-98.el9_7.13
fence-agents-ifmib
4.10.0-98.el9_7.13
fence-agents-ilo-moonshot
4.10.0-98.el9_7.13
fence-agents-ilo-mp
4.10.0-98.el9_7.13
fence-agents-ilo-ssh
4.10.0-98.el9_7.13
fence-agents-ilo2
4.10.0-98.el9_7.13
fence-agents-intelmodular
4.10.0-98.el9_7.13
fence-agents-ipdu
4.10.0-98.el9_7.13
fence-agents-ipmilan
4.10.0-98.el9_7.13
fence-agents-kdump
4.10.0-98.el9_7.13
fence-agents-kubevirt
4.10.0-98.el9_7.13
fence-agents-lpar
4.10.0-98.el9_7.13
fence-agents-mpath
4.10.0-98.el9_7.13
fence-agents-nutanix-ahv
4.10.0-98.el9_7.13
fence-agents-redfish
4.10.0-98.el9_7.13
fence-agents-rhevm
4.10.0-98.el9_7.13
fence-agents-rsa
4.10.0-98.el9_7.13
fence-agents-rsb
4.10.0-98.el9_7.13
fence-agents-sbd
4.10.0-98.el9_7.13
fence-agents-scsi
4.10.0-98.el9_7.13
fence-agents-virsh
4.10.0-98.el9_7.13
fence-agents-vmware-rest
4.10.0-98.el9_7.13
fence-agents-vmware-soap
4.10.0-98.el9_7.13
fence-agents-wti
4.10.0-98.el9_7.13
Oracle Linux x86_64
fence-agents-aliyun
4.10.0-98.el9_7.13
fence-agents-all
4.10.0-98.el9_7.13
fence-agents-amt-ws
4.10.0-98.el9_7.13
fence-agents-apc
4.10.0-98.el9_7.13
fence-agents-apc-snmp
4.10.0-98.el9_7.13
fence-agents-aws
4.10.0-98.el9_7.13
fence-agents-azure-arm
4.10.0-98.el9_7.13
fence-agents-bladecenter
4.10.0-98.el9_7.13
fence-agents-brocade
4.10.0-98.el9_7.13
fence-agents-cisco-mds
4.10.0-98.el9_7.13
fence-agents-cisco-ucs
4.10.0-98.el9_7.13
fence-agents-common
4.10.0-98.el9_7.13
fence-agents-compute
4.10.0-98.el9_7.13
fence-agents-drac5
4.10.0-98.el9_7.13
fence-agents-eaton-snmp
4.10.0-98.el9_7.13
fence-agents-emerson
4.10.0-98.el9_7.13
fence-agents-eps
4.10.0-98.el9_7.13
fence-agents-gce
4.10.0-98.el9_7.13
fence-agents-heuristics-ping
4.10.0-98.el9_7.13
fence-agents-hpblade
4.10.0-98.el9_7.13
fence-agents-ibm-powervs
4.10.0-98.el9_7.13
fence-agents-ibm-vpc
4.10.0-98.el9_7.13
fence-agents-ibmblade
4.10.0-98.el9_7.13
fence-agents-ifmib
4.10.0-98.el9_7.13
fence-agents-ilo-moonshot
4.10.0-98.el9_7.13
fence-agents-ilo-mp
4.10.0-98.el9_7.13
fence-agents-ilo-ssh
4.10.0-98.el9_7.13
fence-agents-ilo2
4.10.0-98.el9_7.13
fence-agents-intelmodular
4.10.0-98.el9_7.13
fence-agents-ipdu
4.10.0-98.el9_7.13
fence-agents-ipmilan
4.10.0-98.el9_7.13
fence-agents-kdump
4.10.0-98.el9_7.13
fence-agents-kubevirt
4.10.0-98.el9_7.13
fence-agents-lpar
4.10.0-98.el9_7.13
fence-agents-mpath
4.10.0-98.el9_7.13
fence-agents-nutanix-ahv
4.10.0-98.el9_7.13
fence-agents-openstack
4.10.0-98.el9_7.13
fence-agents-redfish
4.10.0-98.el9_7.13
fence-agents-rhevm
4.10.0-98.el9_7.13
fence-agents-rsa
4.10.0-98.el9_7.13
fence-agents-rsb
4.10.0-98.el9_7.13
fence-agents-sbd
4.10.0-98.el9_7.13
fence-agents-scsi
4.10.0-98.el9_7.13
fence-agents-virsh
4.10.0-98.el9_7.13
fence-agents-vmware-rest
4.10.0-98.el9_7.13
fence-agents-vmware-soap
4.10.0-98.el9_7.13
fence-agents-wti
4.10.0-98.el9_7.13
fence-virt
4.10.0-98.el9_7.13
fence-virtd
4.10.0-98.el9_7.13
fence-virtd-cpg
4.10.0-98.el9_7.13
fence-virtd-libvirt
4.10.0-98.el9_7.13
fence-virtd-multicast
4.10.0-98.el9_7.13
fence-virtd-serial
4.10.0-98.el9_7.13
fence-virtd-tcp
4.10.0-98.el9_7.13
ha-cloud-support
4.10.0-98.el9_7.13
Связанные CVE
Связанные уязвимости
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with "Indefinite Length" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with "Indefinite Length" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with "Indefinite Length" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.
pyasn1 Vulnerable to Denial of Service via Unbounded Recursion
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pya ...