[ALSA-2026:94500] Critical: fence-agents security update
Type:
security
Severity:
critical
Release date:
2026-11-04
Description:
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance (CVE-2026-102266) * pyjwt: PyJWT: Authentication bypass via improper public key validation (CVE-2026-102268) * pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets (CVE-2026-102271) * pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects (CVE-2026-102267) * pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling (CVE-2026-102272) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 fence-agents-redfish-4.10.0-110.el9_8.8.aarch64.rpm 4cc72bfda97b4618848b980e8d713a990e04c7f849bf459cd905ac0ad39580c8
aarch64 fence-agents-kubevirt-4.10.0-110.el9_8.8.aarch64.rpm 5ce82c5c548c65c995e10d66549d92cd523c3b6c17ee9b57ab60895dccf340b9
aarch64 fence-agents-all-4.10.0-110.el9_8.8.aarch64.rpm 5e25d7c66a6f5fec5c4a3cb139de394bbac1b2a87c5eb38fb7e3e228e0ef3a0b
aarch64 fence-agents-kdump-4.10.0-110.el9_8.8.aarch64.rpm c5c5199573350edee1153d6cceffd32a756051399709a18ca1886e478a40302b
noarch fence-agents-vmware-rest-4.10.0-110.el9_8.8.noarch.rpm 06b636627925f1841471c1711c2ae1012d6b3c34ce02b0349caf568c8fe14db4
noarch fence-agents-common-4.10.0-110.el9_8.8.noarch.rpm 0b1dfe70d53ca12eb1fde8866226e22adf8110ad91ce69082e8bcb4c7acc7e17
noarch fence-agents-ibm-powervs-4.10.0-110.el9_8.8.noarch.rpm 0e66fbc66caf45d5d42598695c2278a52f732722b038cf32a1241c421f9cb498
noarch fence-agents-apc-snmp-4.10.0-110.el9_8.8.noarch.rpm 149f8f710d52460eb0f1440439d5b20db48c6d24b6a7cbeed6b57c4a3083fcd6
noarch fence-agents-scsi-4.10.0-110.el9_8.8.noarch.rpm 28e8fd00e0f090b94a3c9b477e72b1ed146ffb0d75a0bbf1ba2b4582b24172b3
noarch fence-agents-ifmib-4.10.0-110.el9_8.8.noarch.rpm 2ed8f732aeb8660160b22c9884e6d6dfb7e2cf45d5cfdc55f0857f6af9953230
noarch fence-agents-hpblade-4.10.0-110.el9_8.8.noarch.rpm 36b490a10606b7951dc0e5d123235b068f949a6c8c72eb71998ad37b81cebb3b
noarch fence-agents-ibmblade-4.10.0-110.el9_8.8.noarch.rpm 558b331c605c753498fa31f02664af061e365047b5493dd7e57e66dbdeb7c68d
noarch fence-agents-rsa-4.10.0-110.el9_8.8.noarch.rpm 5bc54e7219363caa3ae12f7156fc96c11aa0d8173014344f5c890011232802ca
noarch fence-agents-ibm-vpc-4.10.0-110.el9_8.8.noarch.rpm 6c81a73b343af505f29b2686d2a413b4b1db33b12541515aff56fa4108ea5327
noarch fence-agents-ilo-mp-4.10.0-110.el9_8.8.noarch.rpm 7f925a9c6f80106c741342ca189ba8493dfb52d2659d4956ff0c1ce48468fc0d
noarch fence-agents-ilo-moonshot-4.10.0-110.el9_8.8.noarch.rpm 85c11be8aba16a530ed880ece85cb16851e7d4f686e23c077c9456d4ac3684fe
noarch fence-agents-amt-ws-4.10.0-110.el9_8.8.noarch.rpm 8be7f8d464954edc7b9e7199f1e9e0fd09bb9ba85d0ebc12239d28367a1fd457
noarch fence-agents-drac5-4.10.0-110.el9_8.8.noarch.rpm b4cedfacab1873ceb4085962c6355ea4911409828a2be5a0885e53f94e058dff
noarch fence-agents-mpath-4.10.0-110.el9_8.8.noarch.rpm c0e03584064ecf98fe105ac37534880b7dc013c8933f986b1576d86b61632be0
noarch fence-agents-rhevm-4.10.0-110.el9_8.8.noarch.rpm ce6d74565474d929b55a86bcbe50fba3e012ab4d37d5af5f01dcc655b3b7b276
noarch fence-agents-bladecenter-4.10.0-110.el9_8.8.noarch.rpm d6bf39c702c6f1a22a3f50d3375846a083af789d56d44aefc7dddd0e2f4858fd
noarch fence-agents-lpar-4.10.0-110.el9_8.8.noarch.rpm d826310942f812641f9bf752131c9869f1ca081883a2a709f113f6e03158298b
noarch fence-agents-cisco-ucs-4.10.0-110.el9_8.8.noarch.rpm e69948939d7538cf0aeb242311758daad04ce0032ec6ff0d60ef56650c91b452
noarch fence-agents-virsh-4.10.0-110.el9_8.8.noarch.rpm ea7a57e0497a314b708197f6cd4df9dc8f677f985cdded74835a37af88f54866
noarch fence-agents-nutanix-ahv-4.10.0-110.el9_8.8.noarch.rpm fdd6c7ca878701bf8cc53244cc377df74eb00e548c6123e95b633254d4d0a043
noarch fence-agents-apc-4.10.0-110.el9_8.8.noarch.rpm fe927769c4d49336c8d2e94ee945f85d65547e1ee897533eb0b002f9a3f0a6c3
ppc64le fence-agents-openstack-4.10.0-110.el9_8.8.ppc64le.rpm 9336b25bdedce3f10957fa19967f2fa7b06c416dbd6bbcbcb3dcedc5bb72be48
ppc64le fence-agents-compute-4.10.0-110.el9_8.8.ppc64le.rpm 946b392605db0d8bd25620b9b1554c6492b102b8de73c3594de48bfb00cc3d97
ppc64le ha-cloud-support-4.10.0-110.el9_8.8.ppc64le.rpm a2552e1e8e3d2fe495877147b58ac047d60c2379c55d1388d841679f248cca3a
ppc64le fence-agents-kdump-4.10.0-110.el9_8.8.ppc64le.rpm bc0244dd412b0a19a9a578a415cec0ee55d51b53d01e49df737b6e2ab8d5c41a
s390x fence-agents-kdump-4.10.0-110.el9_8.8.s390x.rpm 24e0341e345c2b277729e17523d3f6b7f12bca5707259c5a5afea8c54abec16f
s390x fence-agents-redfish-4.10.0-110.el9_8.8.s390x.rpm a94f50982aa14d1ea21f9ce0314f9d8797c26d6c544dd241c75eb050d305c62a
x86_64 fence-agents-gce-4.10.0-110.el9_8.8.x86_64.rpm 13a92da25b974f1cc68850112b3d117e06ca0bbf8a04904620ecd7be89886e83
x86_64 fence-virt-4.10.0-110.el9_8.8.x86_64.rpm 185fd9fa9f53df592d647a6e99658d5201d3b82f7ea3f376e8d422c8f3f390ee
x86_64 fence-virtd-serial-4.10.0-110.el9_8.8.x86_64.rpm 21998b80e600e47609ca7821c5ebdaf3d26e40dd96376ce9bdddec69ec62df03
x86_64 fence-virtd-multicast-4.10.0-110.el9_8.8.x86_64.rpm 37e45534097958c0f71e61d85439fc62c2d23abdf04cdf54acd042f3e4586dea
x86_64 ha-cloud-support-4.10.0-110.el9_8.8.x86_64.rpm 4defe44747ae81ef1933800d579c23a5467bb9c30a9e8b97d4b10846b46123bb
x86_64 fence-agents-compute-4.10.0-110.el9_8.8.x86_64.rpm 57a76c7bd3f27c7c285cbda2c44e26538d24b34e6954f159fbbaec7e345dd4c1
x86_64 fence-agents-aws-4.10.0-110.el9_8.8.x86_64.rpm 60a87753ad1af7d11721c3e5f1b0e760280db51f9a5c717a083c111548fc00e7
x86_64 fence-agents-kdump-4.10.0-110.el9_8.8.x86_64.rpm 628c49da3146eec4fcfe478efb1b7edd432ba7bce5067df6ac0a1c31746b94d6
x86_64 fence-agents-aliyun-4.10.0-110.el9_8.8.x86_64.rpm 6f6cc7a104fa9eb1d1b3a69b97fa187a6e78e69c3cdd0467d0d134d29cc5c523
x86_64 fence-agents-azure-arm-4.10.0-110.el9_8.8.x86_64.rpm 7b3f6233204bb503274945ed37e4f71b81dbe12b79e74d9e0e9b4a4d516e69e3
x86_64 fence-virtd-libvirt-4.10.0-110.el9_8.8.x86_64.rpm 7c246bd73d33d8cc994788d782436b70c1e2f4b0b7ef63a2389bb944026be993
x86_64 fence-agents-all-4.10.0-110.el9_8.8.x86_64.rpm d2db9ca9e0ffae47ee85c44a9ddc2612966f3d83a955c86a969381d7b5ddc675
x86_64 fence-agents-redfish-4.10.0-110.el9_8.8.x86_64.rpm e1739476b41c566ff231f4a9520f391d33ddc72fbde87af50a0bff3a243e356d
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.