{"affected":[{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-aliyun","purl":"pkg:rpm/almalinux/fence-agents-aliyun"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-all","purl":"pkg:rpm/almalinux/fence-agents-all"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-amt-ws","purl":"pkg:rpm/almalinux/fence-agents-amt-ws"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-apc","purl":"pkg:rpm/almalinux/fence-agents-apc"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-apc-snmp","purl":"pkg:rpm/almalinux/fence-agents-apc-snmp"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-aws","purl":"pkg:rpm/almalinux/fence-agents-aws"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-azure-arm","purl":"pkg:rpm/almalinux/fence-agents-azure-arm"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-bladecenter","purl":"pkg:rpm/almalinux/fence-agents-bladecenter"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-cisco-ucs","purl":"pkg:rpm/almalinux/fence-agents-cisco-ucs"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-common","purl":"pkg:rpm/almalinux/fence-agents-common"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-compute","purl":"pkg:rpm/almalinux/fence-agents-compute"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-drac5","purl":"pkg:rpm/almalinux/fence-agents-drac5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-gce","purl":"pkg:rpm/almalinux/fence-agents-gce"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-hpblade","purl":"pkg:rpm/almalinux/fence-agents-hpblade"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-ibm-powervs","purl":"pkg:rpm/almalinux/fence-agents-ibm-powervs"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-ibm-vpc","purl":"pkg:rpm/almalinux/fence-agents-ibm-vpc"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-ibmblade","purl":"pkg:rpm/almalinux/fence-agents-ibmblade"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-ifmib","purl":"pkg:rpm/almalinux/fence-agents-ifmib"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-ilo-moonshot","purl":"pkg:rpm/almalinux/fence-agents-ilo-moonshot"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-ilo-mp","purl":"pkg:rpm/almalinux/fence-agents-ilo-mp"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-kdump","purl":"pkg:rpm/almalinux/fence-agents-kdump"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-kubevirt","purl":"pkg:rpm/almalinux/fence-agents-kubevirt"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-lpar","purl":"pkg:rpm/almalinux/fence-agents-lpar"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-mpath","purl":"pkg:rpm/almalinux/fence-agents-mpath"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-nutanix-ahv","purl":"pkg:rpm/almalinux/fence-agents-nutanix-ahv"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-openstack","purl":"pkg:rpm/almalinux/fence-agents-openstack"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-redfish","purl":"pkg:rpm/almalinux/fence-agents-redfish"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-rhevm","purl":"pkg:rpm/almalinux/fence-agents-rhevm"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-rsa","purl":"pkg:rpm/almalinux/fence-agents-rsa"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-scsi","purl":"pkg:rpm/almalinux/fence-agents-scsi"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-virsh","purl":"pkg:rpm/almalinux/fence-agents-virsh"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-agents-vmware-rest","purl":"pkg:rpm/almalinux/fence-agents-vmware-rest"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-virt","purl":"pkg:rpm/almalinux/fence-virt"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-virtd-libvirt","purl":"pkg:rpm/almalinux/fence-virtd-libvirt"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-virtd-multicast","purl":"pkg:rpm/almalinux/fence-virtd-multicast"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"fence-virtd-serial","purl":"pkg:rpm/almalinux/fence-virtd-serial"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:94500.json"},"package":{"ecosystem":"AlmaLinux:9","name":"ha-cloud-support","purl":"pkg:rpm/almalinux/ha-cloud-support"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.0-110.el9_8.8"}],"type":"ECOSYSTEM"}]}],"details":"The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   \n\nSecurity Fix(es):  \n\n  * pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance (CVE-2026-102266)\n  * pyjwt: PyJWT: Authentication bypass via improper public key validation (CVE-2026-102268)\n  * pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets (CVE-2026-102271)\n  * pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects (CVE-2026-102267)\n  * pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling (CVE-2026-102272)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","id":"ALSA-2026:94500","modified":"2026-11-04T16:45:02.633802593Z","published":"2026-11-03T00:00:00Z","references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:94500"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-102266"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-102267"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-102268"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-102271"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-102272"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2542671"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2542685"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2542687"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2542690"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2542695"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-94500.html"}],"related":["CVE-2026-102266","CVE-2026-102267","CVE-2026-102268","CVE-2026-102271","CVE-2026-102272"],"schema_version":"1.9.2","summary":"Critical: fence-agents security update","upstream":["CVE-2026-102266","CVE-2026-102267","CVE-2026-102268","CVE-2026-102271","CVE-2026-102272"]}