Amazon Linux 2 Security Advisory: ALAS-2019-1348
Advisory Release Date: 2019-11-04 22:16 Pacific
Advisory Updated Date: 2019-11-07 00:28 Pacific
Severity:
Medium
Issue Overview:
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.(CVE-2019-10153)
Affected Packages:
fence-agents
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update fence-agents to update your system.
New Packages:
aarch64:
fence-agents-debuginfo-4.2.1-24.amzn2.0.3.aarch64
fence-agents-common-4.2.1-24.amzn2.0.3.aarch64
fence-agents-all-4.2.1-24.amzn2.0.3.aarch64
fence-agents-amt-ws-4.2.1-24.amzn2.0.3.aarch64
fence-agents-apc-4.2.1-24.amzn2.0.3.aarch64
fence-agents-apc-snmp-4.2.1-24.amzn2.0.3.aarch64
fence-agents-bladecenter-4.2.1-24.amzn2.0.3.aarch64
fence-agents-brocade-4.2.1-24.amzn2.0.3.aarch64
fence-agents-cisco-mds-4.2.1-24.amzn2.0.3.aarch64
fence-agents-cisco-ucs-4.2.1-24.amzn2.0.3.aarch64
fence-agents-compute-4.2.1-24.amzn2.0.3.aarch64
fence-agents-drac5-4.2.1-24.amzn2.0.3.aarch64
fence-agents-eaton-snmp-4.2.1-24.amzn2.0.3.aarch64
fence-agents-emerson-4.2.1-24.amzn2.0.3.aarch64
fence-agents-eps-4.2.1-24.amzn2.0.3.aarch64
fence-agents-heuristics-ping-4.2.1-24.amzn2.0.3.aarch64
fence-agents-hpblade-4.2.1-24.amzn2.0.3.aarch64
fence-agents-ibmblade-4.2.1-24.amzn2.0.3.aarch64
fence-agents-ifmib-4.2.1-24.amzn2.0.3.aarch64
fence-agents-ilo2-4.2.1-24.amzn2.0.3.aarch64
fence-agents-ilo-moonshot-4.2.1-24.amzn2.0.3.aarch64
fence-agents-ilo-mp-4.2.1-24.amzn2.0.3.aarch64
fence-agents-ilo-ssh-4.2.1-24.amzn2.0.3.aarch64
fence-agents-intelmodular-4.2.1-24.amzn2.0.3.aarch64
fence-agents-ipdu-4.2.1-24.amzn2.0.3.aarch64
fence-agents-ipmilan-4.2.1-24.amzn2.0.3.aarch64
fence-agents-mpath-4.2.1-24.amzn2.0.3.aarch64
fence-agents-kdump-4.2.1-24.amzn2.0.3.aarch64
fence-agents-redfish-4.2.1-24.amzn2.0.3.aarch64
fence-agents-rhevm-4.2.1-24.amzn2.0.3.aarch64
fence-agents-rsa-4.2.1-24.amzn2.0.3.aarch64
fence-agents-rsb-4.2.1-24.amzn2.0.3.aarch64
fence-agents-sbd-4.2.1-24.amzn2.0.3.aarch64
fence-agents-scsi-4.2.1-24.amzn2.0.3.aarch64
fence-agents-virsh-4.2.1-24.amzn2.0.3.aarch64
fence-agents-vmware-rest-4.2.1-24.amzn2.0.3.aarch64
fence-agents-vmware-soap-4.2.1-24.amzn2.0.3.aarch64
fence-agents-wti-4.2.1-24.amzn2.0.3.aarch64
i686:
fence-agents-debuginfo-4.2.1-24.amzn2.0.3.i686
fence-agents-common-4.2.1-24.amzn2.0.3.i686
fence-agents-all-4.2.1-24.amzn2.0.3.i686
fence-agents-amt-ws-4.2.1-24.amzn2.0.3.i686
fence-agents-apc-4.2.1-24.amzn2.0.3.i686
fence-agents-apc-snmp-4.2.1-24.amzn2.0.3.i686
fence-agents-bladecenter-4.2.1-24.amzn2.0.3.i686
fence-agents-brocade-4.2.1-24.amzn2.0.3.i686
fence-agents-cisco-mds-4.2.1-24.amzn2.0.3.i686
fence-agents-cisco-ucs-4.2.1-24.amzn2.0.3.i686
fence-agents-compute-4.2.1-24.amzn2.0.3.i686
fence-agents-drac5-4.2.1-24.amzn2.0.3.i686
fence-agents-eaton-snmp-4.2.1-24.amzn2.0.3.i686
fence-agents-emerson-4.2.1-24.amzn2.0.3.i686
fence-agents-eps-4.2.1-24.amzn2.0.3.i686
fence-agents-heuristics-ping-4.2.1-24.amzn2.0.3.i686
fence-agents-hpblade-4.2.1-24.amzn2.0.3.i686
fence-agents-ibmblade-4.2.1-24.amzn2.0.3.i686
fence-agents-ifmib-4.2.1-24.amzn2.0.3.i686
fence-agents-ilo2-4.2.1-24.amzn2.0.3.i686
fence-agents-ilo-moonshot-4.2.1-24.amzn2.0.3.i686
fence-agents-ilo-mp-4.2.1-24.amzn2.0.3.i686
fence-agents-ilo-ssh-4.2.1-24.amzn2.0.3.i686
fence-agents-intelmodular-4.2.1-24.amzn2.0.3.i686
fence-agents-ipdu-4.2.1-24.amzn2.0.3.i686
fence-agents-ipmilan-4.2.1-24.amzn2.0.3.i686
fence-agents-mpath-4.2.1-24.amzn2.0.3.i686
fence-agents-kdump-4.2.1-24.amzn2.0.3.i686
fence-agents-redfish-4.2.1-24.amzn2.0.3.i686
fence-agents-rhevm-4.2.1-24.amzn2.0.3.i686
fence-agents-rsa-4.2.1-24.amzn2.0.3.i686
fence-agents-rsb-4.2.1-24.amzn2.0.3.i686
fence-agents-sbd-4.2.1-24.amzn2.0.3.i686
fence-agents-scsi-4.2.1-24.amzn2.0.3.i686
fence-agents-virsh-4.2.1-24.amzn2.0.3.i686
fence-agents-vmware-rest-4.2.1-24.amzn2.0.3.i686
fence-agents-vmware-soap-4.2.1-24.amzn2.0.3.i686
fence-agents-wti-4.2.1-24.amzn2.0.3.i686
src:
fence-agents-4.2.1-24.amzn2.0.3.src
x86_64:
fence-agents-debuginfo-4.2.1-24.amzn2.0.3.x86_64
fence-agents-common-4.2.1-24.amzn2.0.3.x86_64
fence-agents-all-4.2.1-24.amzn2.0.3.x86_64
fence-agents-aliyun-4.2.1-24.amzn2.0.3.x86_64
fence-agents-amt-ws-4.2.1-24.amzn2.0.3.x86_64
fence-agents-apc-4.2.1-24.amzn2.0.3.x86_64
fence-agents-apc-snmp-4.2.1-24.amzn2.0.3.x86_64
fence-agents-aws-4.2.1-24.amzn2.0.3.x86_64
fence-agents-bladecenter-4.2.1-24.amzn2.0.3.x86_64
fence-agents-brocade-4.2.1-24.amzn2.0.3.x86_64
fence-agents-cisco-mds-4.2.1-24.amzn2.0.3.x86_64
fence-agents-cisco-ucs-4.2.1-24.amzn2.0.3.x86_64
fence-agents-compute-4.2.1-24.amzn2.0.3.x86_64
fence-agents-drac5-4.2.1-24.amzn2.0.3.x86_64
fence-agents-eaton-snmp-4.2.1-24.amzn2.0.3.x86_64
fence-agents-emerson-4.2.1-24.amzn2.0.3.x86_64
fence-agents-eps-4.2.1-24.amzn2.0.3.x86_64
fence-agents-gce-4.2.1-24.amzn2.0.3.x86_64
fence-agents-heuristics-ping-4.2.1-24.amzn2.0.3.x86_64
fence-agents-hpblade-4.2.1-24.amzn2.0.3.x86_64
fence-agents-ibmblade-4.2.1-24.amzn2.0.3.x86_64
fence-agents-ifmib-4.2.1-24.amzn2.0.3.x86_64
fence-agents-ilo2-4.2.1-24.amzn2.0.3.x86_64
fence-agents-ilo-moonshot-4.2.1-24.amzn2.0.3.x86_64
fence-agents-ilo-mp-4.2.1-24.amzn2.0.3.x86_64
fence-agents-ilo-ssh-4.2.1-24.amzn2.0.3.x86_64
fence-agents-intelmodular-4.2.1-24.amzn2.0.3.x86_64
fence-agents-ipdu-4.2.1-24.amzn2.0.3.x86_64
fence-agents-ipmilan-4.2.1-24.amzn2.0.3.x86_64
fence-agents-mpath-4.2.1-24.amzn2.0.3.x86_64
fence-agents-kdump-4.2.1-24.amzn2.0.3.x86_64
fence-agents-redfish-4.2.1-24.amzn2.0.3.x86_64
fence-agents-rhevm-4.2.1-24.amzn2.0.3.x86_64
fence-agents-rsa-4.2.1-24.amzn2.0.3.x86_64
fence-agents-rsb-4.2.1-24.amzn2.0.3.x86_64
fence-agents-sbd-4.2.1-24.amzn2.0.3.x86_64
fence-agents-scsi-4.2.1-24.amzn2.0.3.x86_64
fence-agents-virsh-4.2.1-24.amzn2.0.3.x86_64
fence-agents-vmware-rest-4.2.1-24.amzn2.0.3.x86_64
fence-agents-vmware-soap-4.2.1-24.amzn2.0.3.x86_64
fence-agents-wti-4.2.1-24.amzn2.0.3.x86_64