[ALSA-2024:2952] Moderate: resource-agents security and bug fix update
Type:
security
Severity:
moderate
Release date:
2024-05-29
Description:
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) * pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 resource-agents-paf-4.9.0-54.el8.aarch64.rpm bca105368822ffed8b514f68d167f5ee95fb93552973c86bb31a25a2fcb76e51
aarch64 resource-agents-4.9.0-54.el8.aarch64.rpm e35d2f531e2bbf0c23eed6d8c3509080bd159288e8ca8e495c12160a9679dc78
ppc64le resource-agents-paf-4.9.0-54.el8.ppc64le.rpm 29c5fa1bbbc41178f6cfd2e690f3a7377adb94d1694788d6f7d8bc678bbd62bc
ppc64le resource-agents-4.9.0-54.el8.ppc64le.rpm f4cd1affe4c774ce21815e9d07a3c951ad6e574916194d0cfe94b6be33e507b6
s390x resource-agents-4.9.0-54.el8.s390x.rpm 08f70e3e66d714ee03098f02da4a05c7bc242e5359af4b1b666d3c33c893a5ed
s390x resource-agents-paf-4.9.0-54.el8.s390x.rpm 0d38c43b065b3e3a8c8a886cea264c73194accad294546c6ede1acd53eb1426d
x86_64 resource-agents-4.9.0-54.el8.x86_64.rpm 2acde0a767a88fca9cd0a7a4026a64c31e7521f17588e9691a33f375a436da6d
x86_64 resource-agents-gcp-4.9.0-54.el8.x86_64.rpm 2fcbefac4f5453de246c809ae0c00b1b9bb28cb1c14910779efccd8f68343567
x86_64 resource-agents-aliyun-4.9.0-54.el8.x86_64.rpm a9b9825622aa1c1134dff93d209998a83b4ed63975f0584b3af95600f8a72d29
x86_64 resource-agents-paf-4.9.0-54.el8.x86_64.rpm f3231791bfedd657b12ceb2656cd6a7976d445ae921d11dafadeb7f905b226de
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.