ALAS2-2026-3988

Amazon Linux 2 (EOS) Security Advisory: ALAS2-2026-3988
Advisory Released Date: 2026-10-12
Advisory Updated Date: 2026-10-12

Severity: Medium

References: CVE-2026-59939
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in _decompressContent in httplib2/init.py, allowing a malicious or compromised HTTP server to return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError or OOM-kill in the client process. This issue is fixed in version 0.32.0. (CVE-2026-59939)

Affected Packages:

fence-agents

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update fence-agents or yum update --advisory ALAS2-2026-3988 to update your system.

New Packages:

aarch64:
    fence-agents-debuginfo-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-common-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-all-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-amt-ws-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-apc-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-apc-snmp-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-bladecenter-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-brocade-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-cisco-mds-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-cisco-ucs-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-compute-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-drac5-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-eaton-snmp-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-emerson-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-eps-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-heuristics-ping-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-hpblade-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-ibmblade-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-ifmib-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-ilo2-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-ilo-moonshot-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-ilo-mp-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-ilo-ssh-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-intelmodular-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-ipdu-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-ipmilan-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-mpath-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-kdump-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-redfish-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-rhevm-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-rsa-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-rsb-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-sbd-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-scsi-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-virsh-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-vmware-rest-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-vmware-soap-4.2.1-24.amzn2.0.4.aarch64
    fence-agents-wti-4.2.1-24.amzn2.0.4.aarch64

i686:
    fence-agents-debuginfo-4.2.1-24.amzn2.0.4.i686
    fence-agents-common-4.2.1-24.amzn2.0.4.i686
    fence-agents-all-4.2.1-24.amzn2.0.4.i686
    fence-agents-amt-ws-4.2.1-24.amzn2.0.4.i686
    fence-agents-apc-4.2.1-24.amzn2.0.4.i686
    fence-agents-apc-snmp-4.2.1-24.amzn2.0.4.i686
    fence-agents-bladecenter-4.2.1-24.amzn2.0.4.i686
    fence-agents-brocade-4.2.1-24.amzn2.0.4.i686
    fence-agents-cisco-mds-4.2.1-24.amzn2.0.4.i686
    fence-agents-cisco-ucs-4.2.1-24.amzn2.0.4.i686
    fence-agents-compute-4.2.1-24.amzn2.0.4.i686
    fence-agents-drac5-4.2.1-24.amzn2.0.4.i686
    fence-agents-eaton-snmp-4.2.1-24.amzn2.0.4.i686
    fence-agents-emerson-4.2.1-24.amzn2.0.4.i686
    fence-agents-eps-4.2.1-24.amzn2.0.4.i686
    fence-agents-heuristics-ping-4.2.1-24.amzn2.0.4.i686
    fence-agents-hpblade-4.2.1-24.amzn2.0.4.i686
    fence-agents-ibmblade-4.2.1-24.amzn2.0.4.i686
    fence-agents-ifmib-4.2.1-24.amzn2.0.4.i686
    fence-agents-ilo2-4.2.1-24.amzn2.0.4.i686
    fence-agents-ilo-moonshot-4.2.1-24.amzn2.0.4.i686
    fence-agents-ilo-mp-4.2.1-24.amzn2.0.4.i686
    fence-agents-ilo-ssh-4.2.1-24.amzn2.0.4.i686
    fence-agents-intelmodular-4.2.1-24.amzn2.0.4.i686
    fence-agents-ipdu-4.2.1-24.amzn2.0.4.i686
    fence-agents-ipmilan-4.2.1-24.amzn2.0.4.i686
    fence-agents-mpath-4.2.1-24.amzn2.0.4.i686
    fence-agents-kdump-4.2.1-24.amzn2.0.4.i686
    fence-agents-redfish-4.2.1-24.amzn2.0.4.i686
    fence-agents-rhevm-4.2.1-24.amzn2.0.4.i686
    fence-agents-rsa-4.2.1-24.amzn2.0.4.i686
    fence-agents-rsb-4.2.1-24.amzn2.0.4.i686
    fence-agents-sbd-4.2.1-24.amzn2.0.4.i686
    fence-agents-scsi-4.2.1-24.amzn2.0.4.i686
    fence-agents-virsh-4.2.1-24.amzn2.0.4.i686
    fence-agents-vmware-rest-4.2.1-24.amzn2.0.4.i686
    fence-agents-vmware-soap-4.2.1-24.amzn2.0.4.i686
    fence-agents-wti-4.2.1-24.amzn2.0.4.i686

src:
    fence-agents-4.2.1-24.amzn2.0.4.src

x86_64:
    fence-agents-debuginfo-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-common-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-all-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-aliyun-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-amt-ws-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-apc-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-apc-snmp-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-aws-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-bladecenter-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-brocade-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-cisco-mds-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-cisco-ucs-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-compute-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-drac5-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-eaton-snmp-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-emerson-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-eps-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-gce-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-heuristics-ping-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-hpblade-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-ibmblade-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-ifmib-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-ilo2-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-ilo-moonshot-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-ilo-mp-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-ilo-ssh-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-intelmodular-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-ipdu-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-ipmilan-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-mpath-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-kdump-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-redfish-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-rhevm-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-rsa-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-rsb-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-sbd-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-scsi-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-virsh-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-vmware-rest-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-vmware-soap-4.2.1-24.amzn2.0.4.x86_64
    fence-agents-wti-4.2.1-24.amzn2.0.4.x86_64

Additional References

Red Hat: CVE-2026-59939

Mitre: CVE-2026-59939