RLSA-2026:94501

Synopsis

Critical: fence-agents security update

Description

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

Security Fix(es):

* pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance (CVE-2026-102266)

* pyjwt: PyJWT: Authentication bypass via improper public key validation (CVE-2026-102268)

* pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets (CVE-2026-102271)

* pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects (CVE-2026-102267)

* pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling (CVE-2026-102272)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 riscv64 Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2542671 2542685 2542687 2542690 2542695

CVEs

CVE-2026-102266 CVE-2026-102267 CVE-2026-102268 CVE-2026-102271 CVE-2026-102272

Affected packages

Rocky Linux 10 x86_64 - AppStream

fence-virtd-cpg-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-common-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-vmware-soap-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-gce-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-kdump-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-mpath-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-wti-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-cisco-ucs-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo2-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-vmware-rest-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rhevm-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-all-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-eps-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-redfish-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-common-0:4.16.0-21.el10_2.7.x86_64.rpm fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-virsh-0:4.16.0-21.el10_2.7.noarch.rpm ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-amt-ws-0:4.16.0-21.el10_2.7.noarch.rpm fence-virt-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-debugsource-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-aws-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-ilo-ssh-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.7.noarch.rpm fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-rsb-0:4.16.0-21.el10_2.7.noarch.rpm fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-openstack-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-kubevirt-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-bladecenter-0:4.16.0-21.el10_2.7.noarch.rpm fence-virtd-tcp-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-ipdu-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-scsi-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-azure-arm-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-cisco-mds-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-eaton-snmp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rsa-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibm-vpc-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-emerson-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-sbd-0:4.16.0-21.el10_2.7.noarch.rpm fence-virt-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-ipmilan-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-intelmodular-0:4.16.0-21.el10_2.7.noarch.rpm fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-virtd-multicast-0:4.16.0-21.el10_2.7.x86_64.rpm fence-virtd-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-drac5-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo-mp-0:4.16.0-21.el10_2.7.noarch.rpm fence-virtd-serial-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-hpblade-0:4.16.0-21.el10_2.7.noarch.rpm ha-cloud-support-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-ibmblade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-brocade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibm-powervs-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-apc-snmp-0:4.16.0-21.el10_2.7.noarch.rpm fence-virtd-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-0:4.16.0-21.el10_2.7.src.rpm fence-virtd-libvirt-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-heuristics-ping-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-apc-0:4.16.0-21.el10_2.7.noarch.rpm fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-aliyun-0:4.16.0-21.el10_2.7.x86_64.rpm fence-agents-ifmib-0:4.16.0-21.el10_2.7.noarch.rpm

Rocky Linux 10 aarch64 - AppStream

fence-agents-all-0:4.16.0-21.el10_2.7.aarch64.rpm fence-agents-debuginfo-0:4.16.0-21.el10_2.7.aarch64.rpm fence-agents-vmware-soap-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-mpath-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-wti-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-cisco-ucs-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo2-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-vmware-rest-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rhevm-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-eps-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-virsh-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-amt-ws-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-redfish-0:4.16.0-21.el10_2.7.aarch64.rpm fence-agents-ilo-ssh-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rsb-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-common-debuginfo-0:4.16.0-21.el10_2.7.aarch64.rpm fence-agents-bladecenter-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ipdu-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-scsi-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.7.aarch64.rpm fence-agents-kubevirt-0:4.16.0-21.el10_2.7.aarch64.rpm fence-agents-cisco-mds-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-eaton-snmp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rsa-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibm-vpc-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-kdump-0:4.16.0-21.el10_2.7.aarch64.rpm fence-agents-emerson-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-sbd-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ipmilan-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-intelmodular-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-drac5-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo-mp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-hpblade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibmblade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-brocade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibm-powervs-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-apc-snmp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-common-0:4.16.0-21.el10_2.7.aarch64.rpm fence-agents-debugsource-0:4.16.0-21.el10_2.7.aarch64.rpm fence-agents-0:4.16.0-21.el10_2.7.src.rpm fence-agents-heuristics-ping-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-apc-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ifmib-0:4.16.0-21.el10_2.7.noarch.rpm

Rocky Linux 10 ppc64le - AppStream

fence-agents-vmware-soap-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-mpath-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-wti-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-debuginfo-0:4.16.0-21.el10_2.7.ppc64le.rpm fence-agents-kubevirt-0:4.16.0-21.el10_2.7.ppc64le.rpm fence-agents-cisco-ucs-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo2-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-lpar-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-vmware-rest-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rhevm-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-eps-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-debugsource-0:4.16.0-21.el10_2.7.ppc64le.rpm fence-agents-virsh-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-amt-ws-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo-ssh-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-redfish-0:4.16.0-21.el10_2.7.ppc64le.rpm fence-agents-rsb-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.7.ppc64le.rpm fence-agents-bladecenter-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-openstack-0:4.16.0-21.el10_2.7.ppc64le.rpm fence-agents-ipdu-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-scsi-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-cisco-mds-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-kdump-0:4.16.0-21.el10_2.7.ppc64le.rpm fence-agents-eaton-snmp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rsa-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibm-vpc-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-emerson-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-all-0:4.16.0-21.el10_2.7.ppc64le.rpm fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-sbd-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ipmilan-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-intelmodular-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-drac5-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo-mp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-hpblade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibmblade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-common-debuginfo-0:4.16.0-21.el10_2.7.ppc64le.rpm fence-agents-brocade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibm-powervs-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-apc-snmp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-0:4.16.0-21.el10_2.7.src.rpm fence-agents-heuristics-ping-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-apc-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-common-0:4.16.0-21.el10_2.7.ppc64le.rpm fence-agents-ifmib-0:4.16.0-21.el10_2.7.noarch.rpm

Rocky Linux 10 riscv64 - AppStream

fence-agents-vmware-soap-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-mpath-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-wti-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-cisco-ucs-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo2-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-vmware-rest-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rhevm-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-eps-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-virsh-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-amt-ws-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo-ssh-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rsb-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-bladecenter-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ipdu-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-scsi-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-cisco-mds-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-eaton-snmp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rsa-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibm-vpc-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-emerson-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-sbd-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ipmilan-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-intelmodular-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-drac5-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo-mp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-hpblade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibmblade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-brocade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibm-powervs-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-apc-snmp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-0:4.16.0-21.el10_2.7.src.rpm fence-agents-heuristics-ping-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-apc-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ifmib-0:4.16.0-21.el10_2.7.noarch.rpm

Rocky Linux 10 s390x - AppStream

fence-agents-vmware-soap-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-mpath-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-wti-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-cisco-ucs-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo2-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-vmware-rest-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-debugsource-0:4.16.0-21.el10_2.7.s390x.rpm fence-agents-rhevm-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-eps-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-virsh-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.7.s390x.rpm fence-agents-amt-ws-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-redfish-0:4.16.0-21.el10_2.7.s390x.rpm fence-agents-ilo-ssh-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-common-debuginfo-0:4.16.0-21.el10_2.7.s390x.rpm fence-agents-rsb-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-bladecenter-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ipdu-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-scsi-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-cisco-mds-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-eaton-snmp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-rsa-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibm-vpc-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-emerson-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-sbd-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-common-0:4.16.0-21.el10_2.7.s390x.rpm fence-agents-ipmilan-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-intelmodular-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-debuginfo-0:4.16.0-21.el10_2.7.s390x.rpm fence-agents-all-0:4.16.0-21.el10_2.7.s390x.rpm fence-agents-drac5-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-kubevirt-0:4.16.0-21.el10_2.7.s390x.rpm fence-agents-ilo-mp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-hpblade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-kdump-0:4.16.0-21.el10_2.7.s390x.rpm fence-agents-ibmblade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-brocade-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ibm-powervs-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-apc-snmp-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-0:4.16.0-21.el10_2.7.src.rpm fence-agents-zvm-0:4.16.0-21.el10_2.7.s390x.rpm fence-agents-heuristics-ping-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-apc-0:4.16.0-21.el10_2.7.noarch.rpm fence-agents-ifmib-0:4.16.0-21.el10_2.7.noarch.rpm