RHSA-2023:2161MediumCVSS 6.5

Red Hat Security Advisory: fence-agents security and bug fix update

Published
May 9, 2023
Last Modified
October 14, 2026

🔗 CVE IDs covered (1)

CVE-2022-36087 →

📋 Description

CVE-2022-36087 — python-oauthlib: DoS when attacker provides malicious IPV6 URI

🎯 Affected products190

  • Red Hat Enterprise Linux AppStream (v. 9)
  • Red Hat Enterprise Linux HighAvailability (v. 9)
  • Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-0:4.10.0-43.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • fence-agents-aliyun-0:4.10.0-43.el9.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-aliyun-0:4.10.0-43.el9.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-all-0:4.10.0-43.el9.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-all-0:4.10.0-43.el9.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-all-0:4.10.0-43.el9.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-all-0:4.10.0-43.el9.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-all-0:4.10.0-43.el9.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-all-0:4.10.0-43.el9.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-all-0:4.10.0-43.el9.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-amt-ws-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-amt-ws-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-apc-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-apc-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-apc-snmp-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-apc-snmp-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-aws-0:4.10.0-43.el9.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-aws-0:4.10.0-43.el9.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-azure-arm-0:4.10.0-43.el9.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-azure-arm-0:4.10.0-43.el9.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-bladecenter-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-bladecenter-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-brocade-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-brocade-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-cisco-mds-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • fence-agents-cisco-mds-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)
  • fence-agents-cisco-ucs-0:4.10.0-43.el9.noarch as a component of Red Hat Enterprise Linux HighAvailability (v. 9)
  • +160 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: The redirect_uri can be verified in the web toolkit before OAuthLib is called. Check to see if `:` is present to reject the request can prevent the denial of service, assuming no port or IPv6 is fundamentally required.

🔗 References (13)