{"cves":["CVE-2025-66418","CVE-2025-66471","CVE-2026-21441"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[4.2.1-129.20]\n- bundled urllib3: fix CVE-2025-66471\n- bundled urllib3: fix CVE-2026-21441\n  Resolves: RHEL-139756, RHEL-140783\n\n[4.2.1-129.17]\n- bundled urllib3: fix CVE-2025-66418\n  Resolves: RHEL-136027\n\n[4.2.1-129.16]\n- fence_nutanix_ahv: new fence agent\n  Resolves: RHEL-110964\n\n[4.2.1-129.15]\n- fence_kubevirt: use hard poweroff\n  Resolves: RHEL-96179\n\n[4.2.1-129.14]\n- fence_aws: add skip_os_shutdown parameter\n  Resolves: RHEL-109814\n\n[4.2.1-129.13]\n- bundled requests: fix CVE-2024-47081\n  Resolves: RHEL-104741\n\n[4.2.1-129.12]\n- fence_ibm_vpc: add apikey file support\n  Resolves: RHEL-107506\n\n[4.2.1-129.11]\n- fence_aliyun: add credentials file support\n  Resolves: RHEL-99338\n\n[4.2.1-129.8]\n- fence_ibm_powervs: add private endpoint and token file support\n  Resolves: RHEL-65025\n\n[4.2.1-129.7]\n- fence_azure_arm: use azure-identity instead of msrestazure, which has\n  been deprecated\n  Resolves: RHEL-76492","id":"ELSA-2026-1240","ovalId":"oval:com.oracle.elsa:def:20261240","source":"oracle_linux","title":"ELSA-2026-1240:  fence-agents security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-1240.html"}