Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:0308

Опубликовано: 17 мар. 2025
Источник: rocky
Оценка: Important

Описание

Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

Security Fix(es):

  • fence-agents: Jinja has a sandbox breakout through indirect reference to format method [rhel-9.5.z] (CVE-2024-56326)

  • fence-agents: Jinja has a sandbox breakout through malicious filenames [rhel-9.5.z] (CVE-2024-56201)

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
fence-agents-commonnoarch76.el9_5.4fence-agents-common-4.10.0-76.el9_5.4.noarch.rpm
fence-agents-ibm-powervsnoarch76.el9_5.4fence-agents-ibm-powervs-4.10.0-76.el9_5.4.noarch.rpm
fence-agents-ibm-vpcnoarch76.el9_5.4fence-agents-ibm-vpc-4.10.0-76.el9_5.4.noarch.rpm
fence-agents-kubevirtaarch6476.el9_5.4fence-agents-kubevirt-4.10.0-76.el9_5.4.aarch64.rpm
fence-agents-virshnoarch76.el9_5.4fence-agents-virsh-4.10.0-76.el9_5.4.noarch.rpm
fence-agents-computex86_6476.el9_5.4fence-agents-compute-4.10.0-76.el9_5.4.x86_64.rpm
fence-agents-kubevirtx86_6476.el9_5.4fence-agents-kubevirt-4.10.0-76.el9_5.4.x86_64.rpm
fence-virtx86_6476.el9_5.4fence-virt-4.10.0-76.el9_5.4.x86_64.rpm
fence-virtdx86_6476.el9_5.4fence-virtd-4.10.0-76.el9_5.4.x86_64.rpm
fence-virtd-cpgx86_6476.el9_5.4fence-virtd-cpg-4.10.0-76.el9_5.4.x86_64.rpm

Показывать по

Связанные CVE

Связанные уязвимости

suse-cvrf
почти 2 года назад

Security update for python-Jinja2

oracle-oval
почти 2 года назад

ELSA-2025-0308: fence-agents security update (IMPORTANT)

CVSS3: 7.3
redos
почти 2 года назад

Множественные уязвимости python3-jinja2

CVSS3: 8.8
altlinux
около 1 года назад

ALT-PU-2025-12986: package `python3-module-jinja2` update to version 3.1.6-alt1

CVSS3: 8.8
altlinux
около 1 года назад

ALT-PU-2025-11958: package `python3-module-jinja2` update to version 3.0.1-alt1.p10.3