{
  "cves": [
    "CVE-2025-66418",
    "CVE-2025-66471",
    "CVE-2026-21441"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[4.2.1-129.20]\n- bundled urllib3: fix CVE-2025-66471\n- bundled urllib3: fix CVE-2026-21441\n  Resolves: RHEL-139756, RHEL-140783\n\n[4.2.1-129.17]\n- bundled urllib3: fix CVE-2025-66418\n  Resolves: RHEL-136027\n\n[4.2.1-129.16]\n- fence_nutanix_ahv: new fence agent\n  Resolves: RHEL-110964\n\n[4.2.1-129.15]\n- fence_kubevirt: use hard poweroff\n  Resolves: RHEL-96179\n\n[4.2.1-129.14]\n- fence_aws: add skip_os_shutdown parameter\n  Resolves: RHEL-109814\n\n[4.2.1-129.13]\n- bundled requests: fix CVE-2024-47081\n  Resolves: RHEL-104741\n\n[4.2.1-129.12]\n- fence_ibm_vpc: add apikey file support\n  Resolves: RHEL-107506\n\n[4.2.1-129.11]\n- fence_aliyun: add credentials file support\n  Resolves: RHEL-99338\n\n[4.2.1-129.8]\n- fence_ibm_powervs: add private endpoint and token file support\n  Resolves: RHEL-65025\n\n[4.2.1-129.7]\n- fence_azure_arm: use azure-identity instead of msrestazure, which has\n  been deprecated\n  Resolves: RHEL-76492",
  "id": "ELSA-2026-1240",
  "ovalId": "oval:com.oracle.elsa:def:20261240",
  "source": "oracle_linux",
  "title": "ELSA-2026-1240:  fence-agents security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-1240.html"
}