elsa-2026-1240

oracle_linux
Description

[4.2.1-129.20] - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139756, RHEL-140783 [4.2.1-129.17] - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136027 [4.2.1-129.16] - fence_nutanix_ahv: new fence agent Resolves: RHEL-110964 [4.2.1-129.15] - fence_kubevirt: use hard poweroff Resolves: RHEL-96179 [4.2.1-129.14] - fence_aws: add skip_os_shutdown parameter Resolves: RHEL-109814 [4.2.1-129.13] - bundled requests: fix CVE-2024-47081 Resolves: RHEL-104741 [4.2.1-129.12] - fence_ibm_vpc: add apikey file support Resolves: RHEL-107506 [4.2.1-129.11] - fence_aliyun: add credentials file support Resolves: RHEL-99338 [4.2.1-129.8] - fence_ibm_powervs: add private endpoint and token file support Resolves: RHEL-65025 [4.2.1-129.7] - fence_azure_arm: use azure-identity instead of msrestazure, which has been deprecated Resolves: RHEL-76492

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2025-66418",
    "CVE-2025-66471",
    "CVE-2026-21441"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[4.2.1-129.20]\n- bundled urllib3: fix CVE-2025-66471\n- bundled urllib3: fix CVE-2026-21441\n  Resolves: RHEL-139756, RHEL-140783\n\n[4.2.1-129.17]\n- bundled urllib3: fix CVE-2025-66418\n  Resolves: RHEL-136027\n\n[4.2.1-129.16]\n- fence_nutanix_ahv: new fence agent\n  Resolves: RHEL-110964\n\n[4.2.1-129.15]\n- fence_kubevirt: use hard poweroff\n  Resolves: RHEL-96179\n\n[4.2.1-129.14]\n- fence_aws: add skip_os_shutdown parameter\n  Resolves: RHEL-109814\n\n[4.2.1-129.13]\n- bundled requests: fix CVE-2024-47081\n  Resolves: RHEL-104741\n\n[4.2.1-129.12]\n- fence_ibm_vpc: add apikey file support\n  Resolves: RHEL-107506\n\n[4.2.1-129.11]\n- fence_aliyun: add credentials file support\n  Resolves: RHEL-99338\n\n[4.2.1-129.8]\n- fence_ibm_powervs: add private endpoint and token file support\n  Resolves: RHEL-65025\n\n[4.2.1-129.7]\n- fence_azure_arm: use azure-identity instead of msrestazure, which has\n  been deprecated\n  Resolves: RHEL-76492",
  "id": "ELSA-2026-1240",
  "ovalId": "oval:com.oracle.elsa:def:20261240",
  "source": "oracle_linux",
  "title": "ELSA-2026-1240:  fence-agents security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-1240.html"
}
View JSON API Download JSON