ALBA-2021:1738 Copyright 2021 AlmaLinux OS 0 2 None

An update for booth is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. almalinux-8-for-ppc64le-highavailability-rpms__8_0_default booth-test-1.0-199.1.ac1d34c.git.el8.noarch.rpm 3770297ff7f64a12aaf4f517c9de17eb843414454657797d7dc62cd97d2cf630 booth-1.0-199.1.ac1d34c.git.el8.ppc64le.rpm 907f28e7b8e327991877cfd96fc9c99806635039acd81b6a8d1a5fdec567be08 booth-site-1.0-199.1.ac1d34c.git.el8.noarch.rpm 9e76191ea415dbf92489347ad64f777e8cb5784b3bebc4ef6ba06121c95579c4 booth-arbitrator-1.0-199.1.ac1d34c.git.el8.noarch.rpm cf02dca1ad0de55cf191295d165efb982e6c4bed26fabc709f8d0da02b8ff3fa booth-core-1.0-199.1.ac1d34c.git.el8.ppc64le.rpm fc7dd1346b36bfd6746646aaeb45240331acf7a35395f4e1b455c370c9f598bb ALBA-2021:1740 Copyright 2021 AlmaLinux OS 0 2 None

An update for corosync-qdevice is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. almalinux-8-for-ppc64le-highavailability-rpms__8_0_default corosync-qnetd-3.0.1-1.el8.ppc64le.rpm 151842e942a3b1c3c2942151eafb3149b447f7bc8a4ec32a04d0183248cfec0e corosync-qdevice-3.0.1-1.el8.ppc64le.rpm 5454374b6b7a4e509ce24fe11b1c7bf079dbfad986fe76cdcfde16b78b8fd615 ALBA-2022:1757 Copyright 2022 AlmaLinux OS 0 2 None

An update for fence-agents is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. almalinux-8-for-ppc64le-resilientstorage-rpms__8_0_default fence-agents-azure-arm-4.2.1-89.el8.noarch.rpm 97daaaf1182b8f9b3cbb12d5020f33c49d556478c28b1929f247674fbf62ce82 fence-agents-gce-4.2.1-89.el8.noarch.rpm ecb4a6ea83a538e5b094c325340aea3c2e135e08973cb3f546163fcd56dffa86 ALBA-2022:1871 Copyright 2022 AlmaLinux OS 0 2 None

An update for corosync is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. almalinux-8-for-ppc64le-resilientstorage-rpms__8_0_default spausedd-3.1.5-2.el8.ppc64le.rpm 4433c9ed4734a69cde7388a97547175de66051806c79a798679391a176498fc4 corosynclib-devel-3.1.5-2.el8.ppc64le.rpm bbc15b1944d5420bd833f04e77991eb8191c2e0d1d682329a60c99f0a299b4e4 corosynclib-devel-3.1.5-2.el8.ppc64le.rpm bbc15b1944d5420bd833f04e77991eb8191c2e0d1d682329a60c99f0a299b4e4 corosync-3.1.5-2.el8.ppc64le.rpm df6fe75ae9881b93f9aebb20d648e5d7814c5e5b8c75ef5211bec2b036cc56b4 ALBA-2022:1885 Copyright 2022 AlmaLinux OS 0 2 None

An update for pacemaker is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. almalinux-8-for-ppc64le-resilientstorage-rpms__8_0_default pacemaker-2.1.2-4.el8.ppc64le.rpm 16eefda5ad9945fbe145acef81d5f1f773b6b4dbc2c679e301903571f47d6ec8 pacemaker-remote-2.1.2-4.el8.ppc64le.rpm 5a9b6a41d0a8782f73757427b0ba0e63562bab78bef1c78a1b940ad5e42e7952 pacemaker-doc-2.1.2-4.el8.noarch.rpm 67b40755f8520f6540e5bf49d6f1af0ab0f3290b0877bbbe1573775a81d866af pacemaker-libs-devel-2.1.2-4.el8.ppc64le.rpm 76ced56acd2ffcb990caa51ca5a38d51f6d02ad7c9be34e3461e10b9a8952015 pacemaker-libs-devel-2.1.2-4.el8.ppc64le.rpm 76ced56acd2ffcb990caa51ca5a38d51f6d02ad7c9be34e3461e10b9a8952015 pacemaker-cli-2.1.2-4.el8.ppc64le.rpm 99c8b2719dfbb417d12a69d1172b0271095eae29e88b1891a89092b1d2524e8d pacemaker-cts-2.1.2-4.el8.noarch.rpm cb445f846ffb1fc17db668934bc8937c3357f8bf2830534971dc4cf009884759 pacemaker-nagios-plugins-metadata-2.1.2-4.el8.noarch.rpm d77a69cdbd1bb456edf4fd224e987ce0234817281759f8bde84ee8ba1a32943b ALBA-2022:1974 Copyright 2022 AlmaLinux OS 0 2 None

An update for resource-agents is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. almalinux-8-for-ppc64le-resilientstorage-rpms__8_0_default resource-agents-4.9.0-16.el8.ppc64le.rpm 2a5b9b9bd4395acf58642e35c694a0caaadcbb88577259350cb66462cc7527a1 resource-agents-paf-4.9.0-16.el8.ppc64le.rpm 93a3661a8952d2d1de9f138519bcc99cd7ca9a07bbd4ccfb6899fcb957abfda2 ALBA-2022:2127 Copyright 2022 AlmaLinux OS 0 2 None

An update for kronosnet is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. almalinux-8-for-ppc64le-resilientstorage-rpms__8_0_default libknet1-compress-plugins-all-1.22-1.el8.ppc64le.rpm 1c3f823b33d7daf3ede3dc475d619a150910e5810b451b00f86487d998234fcd libknet1-compress-zlib-plugin-1.22-1.el8.ppc64le.rpm 5b571c36cdefa4a78c2b671587b0944545c7f9a87be00c652518ba7e7ffa5c3c libknet1-compress-lzo2-plugin-1.22-1.el8.ppc64le.rpm 63f05ed6a5229d2155cf5ffed518380461dc0904c3f7bbf9dc1c5aba38d2786c libknet1-crypto-openssl-plugin-1.22-1.el8.ppc64le.rpm 7210ba0ca889bce3df1323cc468375bb4fe59d4452f39a65aac790201bb0da92 libknet1-plugins-all-1.22-1.el8.ppc64le.rpm 7b038b6b421e8502e08460822921729f0775129290863a116f20352dce11ed23 libknet1-compress-bzip2-plugin-1.22-1.el8.ppc64le.rpm 82e858adf34d1659c55c8a23084d78156168852da0258bc45046bb1ec486d968 libnozzle1-1.22-1.el8.ppc64le.rpm 8c3a11f45f3488868e263cc056cc6db7a178f3e2635c656c975cbb99d9547005 libnozzle1-1.22-1.el8.ppc64le.rpm 8c3a11f45f3488868e263cc056cc6db7a178f3e2635c656c975cbb99d9547005 libknet1-crypto-plugins-all-1.22-1.el8.ppc64le.rpm 94e211ea7873aef9ff0c15bb8b42482100f4fd2ca0d29351fc0d78055214b742 libknet1-1.22-1.el8.ppc64le.rpm b9fa14ba85332b4da0602d89064d7583260b2548ce1a63fca60fec8fac82b86f libknet1-1.22-1.el8.ppc64le.rpm b9fa14ba85332b4da0602d89064d7583260b2548ce1a63fca60fec8fac82b86f libknet1-compress-lzma-plugin-1.22-1.el8.ppc64le.rpm cdf6581ab7782a28d30277b6bdfbed182437911e58486aad08d8e215fb30a6a7 libknet1-crypto-nss-plugin-1.22-1.el8.ppc64le.rpm dac192dff7f47041c7518f4f49ad897b70f130331829bc07bb976a75695db372 libknet1-compress-lz4-plugin-1.22-1.el8.ppc64le.rpm ece5a1a414e9b58d5adcb5cacb78076df94fd54b7564f48d471d901b31901196 ALEA-2019:3314 Copyright 2021 AlmaLinux OS 0 2 None

An update for python3-azure-sdk is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. almalinux-8-for-ppc64le-highavailability-rpms__8_0_default python3-azure-sdk-4.0.0-9.el8.noarch.rpm 3c16667b28d3335f93adc05af7212fad1d4888eb4a1213d4d1617b6466d21d44 ALEA-2022:1978 Copyright 2022 AlmaLinux OS 0 2 None

An update for pcs is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. almalinux-8-for-ppc64le-resilientstorage-rpms__8_0_default pcs-0.10.12-6.el8.alma.ppc64le.rpm 8293859a875f5baa39c28fc733cad5c8c1650d1dc2c555a1a19bbab22c2af823 pcs-snmp-0.10.12-6.el8.alma.ppc64le.rpm c219a79bfc9189e628578de6638e667c365a643b310ce45c0ff474e30c018888 ALSA-2022:4661 Copyright 2022 AlmaLinux OS 0 2 Important

An update for pcs is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * sinatra: path traversal possible outside of public_dir when serving static files (CVE-2022-29970) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. almalinux-8-for-ppc64le-resilientstorage-rpms__8_0_default pcs-0.10.12-6.el8.alma.ppc64le.rpm 8293859a875f5baa39c28fc733cad5c8c1650d1dc2c555a1a19bbab22c2af823 pcs-snmp-0.10.12-6.el8.alma.ppc64le.rpm c219a79bfc9189e628578de6638e667c365a643b310ce45c0ff474e30c018888 ALSA-2022:6314 Copyright 2022 AlmaLinux OS 0 1 Important

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * pcs: obtaining an authentication token for hacluster user could lead to privilege escalation (CVE-2022-2735) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_6_default pcs-0.10.12-6.el8_6.2.alma.ppc64le.rpm 0b79ea9860bec7fa27a4ed8476386a77efa446ccc4beba9ae4b9bbd6e1b969a9 pcs-snmp-0.10.12-6.el8_6.2.alma.ppc64le.rpm e26367575c7b3dff81ee67e104ba48538739b761535e595f938a2b45629c4f47 ALSA-2022:6439 Copyright 2022 AlmaLinux OS 0 1 Moderate

booth security update

The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time. Security Fix(es): * booth: authfile directive in booth config file is completely ignored. (CVE-2022-2553) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_6_default booth-arbitrator-1.0-199.1.ac1d34c.git.el8_6.1.noarch.rpm 01c0dac9a8f42077035f4e5c03b5449c69c6f6a9c80ae995d05dcde15ca8a6a7 booth-site-1.0-199.1.ac1d34c.git.el8_6.1.noarch.rpm 49521ed948e3e12ec2970897efe740f7dca8ad85091475b4e3edb8c07cacdc45 booth-test-1.0-199.1.ac1d34c.git.el8_6.1.noarch.rpm 9ba23dd05371c3e52f54f1a8d5ad6d78a1fb9a9aabf50b24d14888b0d7679a41 booth-core-1.0-199.1.ac1d34c.git.el8_6.1.ppc64le.rpm aecbb48e0267f9b4510b6b7c1d8c39bc0e07d3ac5ea018942e211ea2e86a0c74 booth-1.0-199.1.ac1d34c.git.el8_6.1.ppc64le.rpm e30bc7bd8e06f0a9099fb3f56d00fc7e98ff7b49f2182de9969adfd9818a86b5 ALSA-2022:7447 Copyright 2022 AlmaLinux OS 0 1 Moderate

pcs security, bug fix, and enhancement update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * pcs: improper authentication via PAM (CVE-2022-1049) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_6_default pcs-0.10.14-5.el8.alma.ppc64le.rpm 0c3cfe3c1748173414de8c7f64fa938e702c2d3709ca364d1264c499bfbffdc0 pcs-snmp-0.10.14-5.el8.alma.ppc64le.rpm 400470b4854e55a045ff3195f73a5af38d95a278383be8909473c23f6191a4bf ALSA-2023:0855 Copyright 2023 AlmaLinux OS 0 1 Moderate

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * sinatra: Reflected File Download attack (CVE-2022-45442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_7_default pcs-snmp-0.10.14-5.el8_7.2.alma.ppc64le.rpm 59f7985de3db957ec52e0ad49774fc7f766f3d67e5ece644ad3af59b4bf2354c pcs-0.10.14-5.el8_7.2.alma.ppc64le.rpm d2193d96475af00f22595bb24af67bcbf45d14e4e2d359cbebbfe5689b137c17 ALSA-2023:3082 Copyright 2023 AlmaLinux OS 0 1 Moderate

pcs security and bug fix update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Denial of service in Multipart MIME parsing (CVE-2023-27530) * rubygem-rack: denial of service in header parsing (CVE-2023-27539) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Command 'pcs config checkpoint diff' does not show configuration differences between checkpoints (BZ#2180700) * Need a way to add a scsi fencing device to a cluster without requiring a restart of all cluster resources (BZ#2180706) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_8_default pcs-0.10.15-4.el8_8.1.alma.ppc64le.rpm 2de12e2d95058a2ebc449ed4f69a09fafef1bd7e81a8780fb826045e36eae932 pcs-snmp-0.10.15-4.el8_8.1.alma.ppc64le.rpm ab329415c6518432e363cadb0d8492e6cc5dac7a1e809aa30585427fe175c79f ALSA-2024:10987 Copyright 2025 AlmaLinux OS 0 1 Moderate

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * sinatra: Open Redirect Vulnerability in Sinatra via X-Forwarded-Host Header (CVE-2024-21510) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default pcs-snmp-0.10.18-2.el8_10.3.alma.1.ppc64le.rpm e987259355c7dc46744df46badde43a9cce2f180e0f1b0dafc9573c020dc5fe7 pcs-0.10.18-2.el8_10.3.alma.1.ppc64le.rpm f0a0715413d60b521964adebd93b72c434b75729d0cd5f4ad147231bbd2dbcd2 ALSA-2024:2952 Copyright 2024 AlmaLinux OS 0 1 Moderate

resource-agents security and bug fix update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) * pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_9_default resource-agents-paf-4.9.0-54.el8.ppc64le.rpm 29c5fa1bbbc41178f6cfd2e690f3a7377adb94d1694788d6f7d8bc678bbd62bc resource-agents-4.9.0-54.el8.ppc64le.rpm f4cd1affe4c774ce21815e9d07a3c951ad6e574916194d0cfe94b6be33e507b6 ALSA-2024:2953 Copyright 2024 AlmaLinux OS 0 1 Moderate

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126) * rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141) * rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_9_default pcs-0.10.18-2.el8_10.ppc64le.rpm 2a909364caf1e35b97bc66979f74b765a84cb1941a5b4f17ff3458b449ebb34c pcs-snmp-0.10.18-2.el8_10.ppc64le.rpm 2ced31295290b0cb16128b927be6e188a5b411f6e992f54953b8489972953c02 ALSA-2024:2968 Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security and bug fix update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) * pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323) * jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_9_default fence-agents-azure-arm-4.2.1-129.el8.noarch.rpm 3ddff0c91dfd33733373dc8e9ff157f19db47f5d98d3f50558c5adeda8d5d464 fence-agents-openstack-4.2.1-129.el8.ppc64le.rpm c69f4b2238345dbe8dfc856b067275e0fc97ead4b26642f21820bfe65dc1ee5b fence-agents-gce-4.2.1-129.el8.noarch.rpm d4a1648ba4e62c910380cf694ec9136b21f17c7567690cdb009788c2e59228c5 ALSA-2024:3659 Copyright 2024 AlmaLinux OS 0 1 Important

booth security update

The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time. Security Fix(es): * booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server (CVE-2024-3049) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default booth-arbitrator-1.1-1.el8_10.1.noarch.rpm 2ed42efdc796a6e5db1ceefca4ffb07a8bac87521853a49c3bf5e94878171c8b booth-core-1.1-1.el8_10.1.ppc64le.rpm 5b2dd5e294f22e9cedbb8e9e926f34cf0508b06f78ea588a172aa8c8edb2af19 booth-site-1.1-1.el8_10.1.noarch.rpm 9186b82d9917d72fb035cc9091e649749cda857a06ed91c147918cc90bec0e1a booth-1.1-1.el8_10.1.ppc64le.rpm 9f737897e0c5046c16cf75d38244c9db3dac0d79feb72ec315fc375bee783416 booth-test-1.1-1.el8_10.1.noarch.rpm a2b68433ada8ea79abd222e70084898349c77f54dc97321ba47c40a2317a4551 ALSA-2024:5338 Copyright 2024 AlmaLinux OS 0 1 Low

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * REXML: DoS parsing an XML with many `<`s in an attribute value (CVE-2024-35176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default pcs-0.10.18-2.el8_10.1.ppc64le.rpm 38f34acef2eb6c6ab5b9817b488b3d2c2da302a91e6a1d5840b7319f016019ca pcs-snmp-0.10.18-2.el8_10.1.ppc64le.rpm cc550bd18ddc0047a11a2f8ab1f032ea77cbb24630f98a3127ad086bb1178f5f ALSA-2024:6309 Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default fence-agents-gce-4.2.1-129.el8_10.4.noarch.rpm 32f6bd49eb54b3db836cd290c0da82d8cc0617d9978e6566e350d956ca31b108 fence-agents-openstack-4.2.1-129.el8_10.4.ppc64le.rpm 4d3397e4dd1303b73ffcb27278a73f2d4f2c266427d069d9ce77cbaeeeea3914 fence-agents-aws-4.2.1-129.el8_10.4.noarch.rpm 56c91a605a010fe43299ecf2596888ed7d641c849997fd647ca3942cc420407d fence-agents-azure-arm-4.2.1-129.el8_10.4.noarch.rpm 96de6611355be0aa0614306425bea193d186862218db1c724dd693fe26aedc41 ALSA-2024:6311 Copyright 2024 AlmaLinux OS 0 1 Moderate

resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default resource-agents-4.9.0-54.el8_10.4.ppc64le.rpm 1c32528c2e70a229dc512107b9b6c8f53b90477154bdcceb1d88d6324972d2c1 resource-agents-paf-4.9.0-54.el8_10.4.ppc64le.rpm 34a7ee7d7b1113a1fe69d52a68b9b90bde40968efdbe482ac094ca7fd48a1940 ALSA-2024:6670 Copyright 2024 AlmaLinux OS 0 1 Moderate

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> (CVE-2024-41123) * rexml: DoS vulnerability in REXML (CVE-2024-41946) * rexml: DoS vulnerability in REXML (CVE-2024-43398) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default pcs-0.10.18-2.el8_10.2.alma.1.ppc64le.rpm 809e28de8ff4d0f65b078f3f6a498e763e839f2de622f0d19ce7c2f06d0f9a5a pcs-snmp-0.10.18-2.el8_10.2.alma.1.ppc64le.rpm b64505280f0c25eaae72f5fc5b041ffea6b9a1684f509be9b09136f8eeacd6b9 ALSA-2025:11047 Copyright 2025 AlmaLinux OS 0 1 Moderate

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rexml: REXML ReDoS vulnerability (CVE-2024-49761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default pcs-snmp-0.10.18-2.el8_10.6.alma.1.ppc64le.rpm 2a7ec7e6acc20749aee835b1c08227ff8572c1a7d6d0d905d8ad98041dd74091 pcs-0.10.18-2.el8_10.6.alma.1.ppc64le.rpm 68a20c5038fffd99c1b644804ac41462d9aa2daaf2db339c48cd0d6a6bf70d64 ALSA-2025:14999 Copyright 2025 AlmaLinux OS 0 1 Moderate

resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default resource-agents-paf-4.9.0-54.el8_10.16.ppc64le.rpm 36f6080937f2d000c74d64230dd80e7b13dff13004530c9dd46131c685ae4a25 resource-agents-4.9.0-54.el8_10.16.ppc64le.rpm 3faebb769bb8afbd738e518823c6e2baab9845be50a51aed3496d2021cc53006 ALSA-2025:19719 Copyright 2025 AlmaLinux OS 0 1 Important

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters (CVE-2025-59830) * rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) (CVE-2025-61770) * rack: Rack's multipart parser buffers large non?file fields entirely in memory, enabling DoS (memory exhaustion) (CVE-2025-61771) * rack: Rack memory exhaustion denial of service (CVE-2025-61772) * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion (CVE-2025-61919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default pcs-snmp-0.10.18-2.el8_10.7.alma.1.ppc64le.rpm 5263dfd6ab8a873db9a2cc4982ba4e7e2a217d2e1b4b6bd97b7b21e4560b2cf1 pcs-0.10.18-2.el8_10.7.alma.1.ppc64le.rpm a666fa91c95b59dcfc8d36da8823be42770920e1b9b0998f909294a94b9ef1df ALSA-2025:2872 Copyright 2025 AlmaLinux OS 0 1 Important

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * python-tornado: Tornado has HTTP cookie parsing DoS vulnerability (CVE-2024-52804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default pcs-0.10.18-2.el8_10.4.alma.1.ppc64le.rpm 038f18541dd321e20a48720fcd236f5bef939529f5b85cd8d236384873140d4f pcs-snmp-0.10.18-2.el8_10.4.alma.1.ppc64le.rpm 8e8b88707db7d12bdbe5e523cd54eccf64e0a81fb51e22cf48344660039d54da ALSA-2025:8254 Copyright 2025 AlmaLinux OS 0 1 Important

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727) * tornado: Tornado Multipart Form-Data Denial of Service (CVE-2025-47287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default pcs-snmp-0.10.18-2.el8_10.5.alma.1.ppc64le.rpm 21f7526f20b0b5077b94eaa7372c54e52c2e85443485778770fc2e41d51c1282 pcs-0.10.18-2.el8_10.5.alma.1.ppc64le.rpm e4445b7daf55df565448613a1be610f4effcf1baca751bca6830054adfc7f161 ALSA-2026:0930 Copyright 2026 AlmaLinux OS 0 1 Moderate

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * tornado: Tornado Quadratic DoS via Repeated Header Coalescing (CVE-2025-67725) * tornado: Tornado Quadratic DoS via Crafted Multipart Parameters (CVE-2025-67726) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default pcs-snmp-0.10.18-2.el8_10.8.alma.1.ppc64le.rpm 89a11fc899814cd645fb13dfcc1499b65363f61393c79713dce9b93320befd75 pcs-0.10.18-2.el8_10.8.alma.1.ppc64le.rpm df6022ea16a16c25382aa975502ba89289fecc4ced168c11adf861b973b73bbc ALSA-2026:12176 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves (CVE-2026-26007) * pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597) * pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default fence-agents-openstack-4.2.1-129.el8_10.25.ppc64le.rpm 63f52c86562923851787e649b14547968c32b7be42d0787e66bef85179301652 fence-agents-gce-4.2.1-129.el8_10.25.noarch.rpm be513db6fdebbab74772197e16785f71a8cccbffdb2aa8a44005c805487f860e fence-agents-aws-4.2.1-129.el8_10.25.noarch.rpm ea01f2ced268ea06be9ca086b465349a0c8952357f15a7e14829670da9e209a6 ALSA-2026:1240 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default fence-agents-openstack-4.2.1-129.el8_10.20.ppc64le.rpm 488c83f1cb91d1f121692b1b36cf6da1cb623adfbd3c11cd780b14f9faf6fd36 fence-agents-gce-4.2.1-129.el8_10.20.noarch.rpm 9f2d301e157213fe9852be7f1623254f1f18e81cccf8198ae0e005f0eb6d50b6 fence-agents-aws-4.2.1-129.el8_10.20.noarch.rpm a3f7ffa8d683f949e2a77ed2843efb02fcc9fc1a8c9a3360efb3ac033d0a044b ALSA-2026:1241 Copyright 2026 AlmaLinux OS 0 1 Important

resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default resource-agents-paf-4.9.0-54.el8_10.27.ppc64le.rpm d8da07827a9a5cc01b79f691a8d027d476dcff5b5056aeda8ea2d73997ac2224 resource-agents-4.9.0-54.el8_10.27.ppc64le.rpm f7a03737957ef8aed6314bcb216d54f230cb0e10246673f983be7e70aff90258 ALSA-2026:13657 Copyright 2026 AlmaLinux OS 0 1 Moderate

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default spausedd-3.1.8-1.el8_10.1.ppc64le.rpm 3d4aaf9d14438bc2190647322ecec1f8c76d5c898247a64932d57a03caf2cc51 corosync-3.1.8-1.el8_10.1.ppc64le.rpm 3d6e97646d5a86ee99e20632a934d01ab4c311878ef59c3a4acd5a6e6cc612e5 corosynclib-devel-3.1.8-1.el8_10.1.ppc64le.rpm a01d8a85f6994631c6956c9dcf1cb8dc04fa7c4007c539f1d64d2e1c43c4597f ALSA-2026:13902 Copyright 2026 AlmaLinux OS 0 1 Important

resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default resource-agents-4.9.0-54.el8_10.33.ppc64le.rpm 78776f3cc6f98755e0c9510c9f5bba5df26ac28d04d8ecea96015e4e0acfef44 resource-agents-paf-4.9.0-54.el8_10.33.ppc64le.rpm 9733df2f0b758b7b5c13e8002b14fe7943017cb0932d6bbc84732a38a006138a ALSA-2026:1904 Copyright 2026 AlmaLinux OS 0 1 Important

resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default resource-agents-4.9.0-54.el8_10.28.ppc64le.rpm 679d9d8bfd03dde0e6118c612db84765ce58ce72c9d0a86f65e64bb71d0f57e8 resource-agents-paf-4.9.0-54.el8_10.28.ppc64le.rpm b118beecb2ea2b099d60ebaae2d0851318a31faa020bff0dbd8a386c3bee5042 ALSA-2026:1906 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default fence-agents-aws-4.2.1-129.el8_10.21.noarch.rpm 22167e15c2afc4e2d256b3658aeba654f2bbd1af090838c5e1472234168090f7 fence-agents-openstack-4.2.1-129.el8_10.21.ppc64le.rpm 2622e2be2b8b50459ae0f37d55044d100a4cee85cda51057e802aa25328fb343 fence-agents-gce-4.2.1-129.el8_10.21.noarch.rpm 90c8058ea41fc6cfa37798fb800f9b4bdbd0b6181b3b17967edeb3fce2c7cb9d ALSA-2026:39322 Copyright 2026 AlmaLinux OS 0 1 Important

pacemaker security update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): * pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default python3-pacemaker-2.1.7-5.6.el8_10.noarch.rpm 00407e31173f1e2233a3501bd96969e8c992b986c6ab400db6dd5987f5c00165 pacemaker-cli-2.1.7-5.6.el8_10.ppc64le.rpm 2f82e9939d454b545dd0daba5f055058c99f210e9bdc6752ab8114059b6996f8 pacemaker-2.1.7-5.6.el8_10.ppc64le.rpm 8a7a8b4581ee153ff34644251b7623cf9812ae1f1571511b6058f434c5952c1b pacemaker-nagios-plugins-metadata-2.1.7-5.6.el8_10.noarch.rpm 9c94ead9243c89a429c37a087700b44d382a4cde882d2c098d880896f51f927b pacemaker-libs-devel-2.1.7-5.6.el8_10.ppc64le.rpm ac9e9b0618ba740df69a7733a5d2648e990b470ca79cbdad4b3ad4961e0c4f57 pacemaker-remote-2.1.7-5.6.el8_10.ppc64le.rpm bad2ec3496c90e4b8d3a36393a2a29685356c74a8b57cf661d89c3f2248a1e30 pacemaker-doc-2.1.7-5.6.el8_10.noarch.rpm eab22ee24e527a60e61fb41753cc3309d4a162107f4df05181754c631ff2cb2d pacemaker-cts-2.1.7-5.6.el8_10.noarch.rpm fc6685eaa7b8fabcda08385452c19c48889fe1c09e25cc1c4691b89e3cc954c9 ALSA-2026:47126 Copyright 2026 AlmaLinux OS 0 1 Moderate

resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default resource-agents-paf-4.9.0-54.el8_10.36.alma.1.ppc64le.rpm 00fa3ab60c90d7940b3c3025e4729deec2fcad08b333e71652fac8b41013d543 resource-agents-4.9.0-54.el8_10.36.alma.1.ppc64le.rpm 8d15c4b65dd4d840fc71e50ff70e5efa02a59659de05ff9fea1290d6560836a7 ALSA-2026:47736 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies (CVE-2026-59939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default fence-agents-aws-4.2.1-129.el8_10.27.noarch.rpm 01a3e896b3a9ca6a07fff581ae09cd7c0314493ea080d70877e7299dfd463700 fence-agents-openstack-4.2.1-129.el8_10.27.ppc64le.rpm 21d6e9d4961b24dfd3132565cb12337689036e1281e3fbfa2065207a7b46ac38 fence-agents-gce-4.2.1-129.el8_10.27.noarch.rpm 6c7cc982029fa53434bd0e7b14a969afb4e092ec74bbb16edfd1b6417e651757 ALSA-2026:49927 Copyright 2026 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default fence-agents-gce-4.2.1-129.el8_10.28.noarch.rpm 1058febc67c5dc13622bc1487f10c09e352d9bfb9bee88f24283c3ffc434faa3 fence-agents-openstack-4.2.1-129.el8_10.28.ppc64le.rpm 126674352655b0c8b46d3c24c15c966e706ab9ecc1c2ddbd49a7fbb01d5c906d fence-agents-aws-4.2.1-129.el8_10.28.noarch.rpm c893d64c04c0d735e6abf31556291094d5de3e0ef1e74e9847ba7b8c93b7288b ALSA-2026:53363 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default fence-agents-gce-4.2.1-129.el8_10.29.noarch.rpm b99eb34289f7715adf9660d245c52ad14ba0142554bd8a067f3226f79a03323b fence-agents-aws-4.2.1-129.el8_10.29.noarch.rpm c9b599faeb88253b8a007a81d1ebf5538ef53e5b044d7c1b6ff8a98d86671437 fence-agents-openstack-4.2.1-129.el8_10.29.ppc64le.rpm f3e66d085e8d01507b0ef86b7181bdea5298fe71f41d66f792d74614a0b8455e ALSA-2026:53364 Copyright 2026 AlmaLinux OS 0 1 Important

resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default resource-agents-4.9.0-54.el8_10.37.alma.1.ppc64le.rpm c9ee39d081e2812df57ee9250ff16851d2cf06b30fcb6eb3b87477210d3e3208 resource-agents-paf-4.9.0-54.el8_10.37.alma.1.ppc64le.rpm dd6c32babb2b0e8708363ec72d3fb16ed3040549748b0f6c5a982fa3b826f110 ALSA-2026:69277 Copyright 2026 AlmaLinux OS 0 1 Important

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (CVE-2026-81665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default corosync-3.1.8-1.el8_10.2.ppc64le.rpm 2dd8e1f147b8b4a18e4ffdadc7bbff2ae033d3f5da1a94b1cd22e9b035beb29f spausedd-3.1.8-1.el8_10.2.ppc64le.rpm 93efc716c7af80429a6cd7e1260ae267e81cfa86518b9fff2c2b77eb7ec6c12e corosynclib-devel-3.1.8-1.el8_10.2.ppc64le.rpm ef301b0b44006d91c05fb0b6fcc0036099b554480a97d5a8962ab9a86c7a8e8a ALSA-2026:8093 Copyright 2026 AlmaLinux OS 0 1 Moderate

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * tornado-python: Tornado: Denial of Service via large multipart bodies (CVE-2026-31958) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default pcs-snmp-0.10.18-2.el8_10.9.alma.1.ppc64le.rpm 52e80c4df2fe0374c8a1856f0a3f94f5ef03242113a207bc3536cbf219053e76 pcs-0.10.18-2.el8_10.9.alma.1.ppc64le.rpm 90d8ccdda730994dd771ad44b951478da9f343a65501521bce7fe9eff1d73bba ALSA-2026:84798 Copyright 2026 AlmaLinux OS 0 1 Important

pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields (CVE-2026-82397) * python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding (CVE-2024-14029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-ppc64le-resilientstorage-rpms__8_10_default pcs-0.10.18-2.el8_10.10.alma.1.ppc64le.rpm 9200ecd0d9049a1e2ec66a78d7fe708f4cc3b7dd19d6d5d1dfd4d8643c41b35a pcs-snmp-0.10.18-2.el8_10.10.alma.1.ppc64le.rpm a00027cb3b81944cca1fc0cbe5478c521f8f4cc74cee571a1a833d1870d91721