ALSA-2025:0308

See a problem?
Please try reporting it to the source first.

Source

https://errata.almalinux.org/9/ALSA-2025-0308.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2025:0308.json

JSON Data

https://api.test.osv.dev/v1/vulns/ALSA-2025:0308

Related

Published

2025-01-14T00:00:00Z

Modified

2025-01-15T13:11:53Z

Summary

Important: fence-agents security update

Details

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

Security Fix(es):

fence-agents: Jinja has a sandbox breakout through indirect reference to format method [almalinux-9.5.z] (CVE-2024-56326)
fence-agents: Jinja has a sandbox breakout through malicious filenames [almalinux-9.5.z] (CVE-2024-56201)

References

Affected packages

AlmaLinux:9 / fence-agents-common

Package

Name: fence-agents-common
Purl: pkg:rpm/almalinux/fence-agents-common

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-agents-compute

Package

Name: fence-agents-compute
Purl: pkg:rpm/almalinux/fence-agents-compute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-agents-ibm-powervs

Package

Name: fence-agents-ibm-powervs
Purl: pkg:rpm/almalinux/fence-agents-ibm-powervs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-agents-ibm-vpc

Package

Name: fence-agents-ibm-vpc
Purl: pkg:rpm/almalinux/fence-agents-ibm-vpc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-agents-kubevirt

Package

Name: fence-agents-kubevirt
Purl: pkg:rpm/almalinux/fence-agents-kubevirt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-agents-virsh

Package

Name: fence-agents-virsh
Purl: pkg:rpm/almalinux/fence-agents-virsh

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-virt

Package

Name: fence-virt
Purl: pkg:rpm/almalinux/fence-virt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-virtd

Package

Name: fence-virtd
Purl: pkg:rpm/almalinux/fence-virtd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-virtd-cpg

Package

Name: fence-virtd-cpg
Purl: pkg:rpm/almalinux/fence-virtd-cpg

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-virtd-libvirt

Package

Name: fence-virtd-libvirt
Purl: pkg:rpm/almalinux/fence-virtd-libvirt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-virtd-multicast

Package

Name: fence-virtd-multicast
Purl: pkg:rpm/almalinux/fence-virtd-multicast

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-virtd-serial

Package

Name: fence-virtd-serial
Purl: pkg:rpm/almalinux/fence-virtd-serial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1

AlmaLinux:9 / fence-virtd-tcp

Package

Name: fence-virtd-tcp
Purl: pkg:rpm/almalinux/fence-virtd-tcp

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.0-76.el9_5.4.alma.1