RLSA-2025:0308
Important: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
-
fence-agents: Jinja has a sandbox breakout through indirect reference to format method [rhel-9.5.z] (CVE-2024-56326)
-
fence-agents: Jinja has a sandbox breakout through malicious filenames [rhel-9.5.z] (CVE-2024-56201)
What each source reports
OSV No score
Important: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
-
fence-agents: Jinja has a sandbox breakout through indirect reference to format method [rhel-9.5.z] (CVE-2024-56326)
-
fence-agents: Jinja has a sandbox breakout through malicious filenames [rhel-9.5.z] (CVE-2024-56201)
- Record
RLSA-2025:0308- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fence-agentsRocky Linux:9 |
before 0:4.10.0-76.el9_5.4 | 0:4.10.0-76.el9_5.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RLSA-2025:0308 is a vulnerability with no CVSS score yet in fence-agents, published March 17, 2025. No source lists public exploit code. Fixed in fence-agents 0:4.10.0-76.el9_5.4.