Lucene search

K
oraclelinuxOracleLinuxELSA-2023-2161
HistoryMay 15, 2023 - 12:00 a.m.

fence-agents security and bug fix update

2023-05-1500:00:00
linux.oracle.com
4

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

48.0%

[4.10.0-43]

  • fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944
    [4.10.0-42]
  • fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107
    [4.10.0-41]
  • fence_scsi: skip key generation during validate-all action
    Resolves: rhbz#2160480
    [4.10.0-40]
  • fence_virtd: add info about multiple uuid/ip entries to manpage
    Resolves: rhbz#2149655
    [4.10.0-39]
  • fence_virtd: warn if config or key file(s) are not mode 600
    Resolves: rhbz#2144531
    [4.10.0-37]
  • Upgrade bundled python-oauthlib
    Resolves: rhbz#2128564
    [4.10.0-36]
  • fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage
    Resolves: rhbz#2138823
    [4.10.0-35]
  • fence_ibm_powervs: improve defaults
    Resolves: rhbz#2136191
    [4.10.0-34]
  • fence_lpar: only output additional output info on DEBUG level
    Resolves: rhbz#2134015
    [4.10.0-33]
  • fence_virt: add note that reboot-action doesnt power on nodes that
    are powered off
    Resolves: rhbz#2132008
    [4.10.0-32]
  • add azure-identity and dependencies
    Resolves: rhbz#2121546
    [4.10.0-31]
  • fence_ibm_vpc: add token cache support
    Resolves: rhbz#2111998

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

48.0%