Fence-Agents Security Update — AlmaLinux 9 (ALSA-2026:94500)
ALSA-2026:94500 updates fence-agents on AlmaLinux 9, fixing CVE-2026-102266, CVE-2026-102268, CVE-2026-102271, CVE-2026-102267 and CVE-2026-102272 in the cluster fencing scripts. Update with dnf update fence-agents on clustered systems; non-clustered hosting servers without the package are unaffected.
What this means under a SharedLicense license
Fence agents hold the power to forcibly reboot cluster nodes — flaws in that path can be turned into denial of service against cluster members or abused to manipulate node membership decisions.
Type:
security
Severity:
critical
Release date:
2026-11-04
Description:
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance (CVE-2026-102266)
* pyjwt: PyJWT: Authentication bypass via improper public key validation (CVE-2026-102268)
* pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets (CVE-2026-102271)
* pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects (CVE-2026-102267)
* pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling (CVE-2026-102272)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
- CVE-2026-102266
- CVE-2026-102267
- CVE-2026-102268
- CVE-2026-102271
- CVE-2026-102272
- RHSA-2026:94500
- ALSA-2026:94500
Updated packages listed below:
| Architecture | Package | Checksum |
| aarch64 | fence-agents-redfish-4.10.0-110.el9_8.8.aarch64.rpm | 4cc72bfda97b4618848b980e8d713a990e04c7f849bf459cd905ac0ad39580c8 |
| aarch64 | fence-agents-kubevirt-4.10.0-110.el9_8.8.aarch64.rpm | 5ce82c5c548c65c995e10d66549d92cd523c3b6c17ee9b57ab60895dccf340b9 |
| aarch64 | fence-agents-all-4.10.0-110.el9_8.8.aarch64.rpm | 5e25d7c66a6f5fec5c4a3cb139de394bbac1b2a87c5eb38fb7e3e228e0ef3a0b |
| aarch64 | fence-agents-kdump-4.10.0-110.el9_8.8.aarch64.rpm | c5c5199573350edee1153d6cceffd32a756051399709a18ca1886e478a40302b |
| noarch | fence-agents-vmware-rest-4.10.0-110.el9_8.8.noarch.rpm | 06b636627925f1841471c1711c2ae1012d6b3c34ce02b0349caf568c8fe14db4 |
| noarch | fence-agents-common-4.10.0-110.el9_8.8.noarch.rpm | 0b1dfe70d53ca12eb1fde8866226e22adf8110ad91ce69082e8bcb4c7acc7e17 |
| noarch | fence-agents-ibm-powervs-4.10.0-110.el9_8.8.noarch.rpm | 0e66fbc66caf45d5d42598695c2278a52f732722b038cf32a1241c421f9cb498 |
| noarch | fence-agents-apc-snmp-4.10.0-110.el9_8.8.noarch.rpm | 149f8f710d52460eb0f1440439d5b20db48c6d24b6a7cbeed6b57c4a3083fcd6 |
| noarch | fence-agents-scsi-4.10.0-110.el9_8.8.noarch.rpm | 28e8fd00e0f090b94a3c9b477e72b1ed146ffb0d75a0bbf1ba2b4582b24172b3 |
| noarch | fence-agents-ifmib-4.10.0-110.el9_8.8.noarch.rpm | 2ed8f732aeb8660160b22c9884e6d6dfb7e2cf45d5cfdc55f0857f6af9953230 |
| noarch | fence-agents-hpblade-4.10.0-110.el9_8.8.noarch.rpm | 36b490a10606b7951dc0e5d123235b068f949a6c8c72eb71998ad37b81cebb3b |
| noarch | fence-agents-ibmblade-4.10.0-110.el9_8.8.noarch.rpm | 558b331c605c753498fa31f02664af061e365047b5493dd7e57e66dbdeb7c68d |
| noarch | fence-agents-rsa-4.10.0-110.el9_8.8.noarch.rpm | 5bc54e7219363caa3ae12f7156fc96c11aa0d8173014344f5c890011232802ca |
| noarch | fence-agents-ibm-vpc-4.10.0-110.el9_8.8.noarch.rpm | 6c81a73b343af505f29b2686d2a413b4b1db33b12541515aff56fa4108ea5327 |
| noarch | fence-agents-ilo-mp-4.10.0-110.el9_8.8.noarch.rpm | 7f925a9c6f80106c741342ca189ba8493dfb52d2659d4956ff0c1ce48468fc0d |
| noarch | fence-agents-ilo-moonshot-4.10.0-110.el9_8.8.noarch.rpm | 85c11be8aba16a530ed880ece85cb16851e7d4f686e23c077c9456d4ac3684fe |
| noarch | fence-agents-amt-ws-4.10.0-110.el9_8.8.noarch.rpm | 8be7f8d464954edc7b9e7199f1e9e0fd09bb9ba85d0ebc12239d28367a1fd457 |
| noarch | fence-agents-drac5-4.10.0-110.el9_8.8.noarch.rpm | b4cedfacab1873ceb4085962c6355ea4911409828a2be5a0885e53f94e058dff |
| noarch | fence-agents-mpath-4.10.0-110.el9_8.8.noarch.rpm | c0e03584064ecf98fe105ac37534880b7dc013c8933f986b1576d86b61632be0 |
| noarch | fence-agents-rhevm-4.10.0-110.el9_8.8.noarch.rpm | ce6d74565474d929b55a86bcbe50fba3e012ab4d37d5af5f01dcc655b3b7b276 |
| noarch | fence-agents-bladecenter-4.10.0-110.el9_8.8.noarch.rpm | d6bf39c702c6f1a22a3f50d3375846a083af789d56d44aefc7dddd0e2f4858fd |
| noarch | fence-agents-lpar-4.10.0-110.el9_8.8.noarch.rpm | d826310942f812641f9bf752131c9869f1ca081883a2a709f113f6e03158298b |
| noarch | fence-agents-cisco-ucs-4.10.0-110.el9_8.8.noarch.rpm | e69948939d7538cf0aeb242311758daad04ce0032ec6ff0d60ef56650c91b452 |
| noarch | fence-agents-virsh-4.10.0-110.el9_8.8.noarch.rpm | ea7a57e0497a314b708197f6cd4df9dc8f677f985cdded74835a37af88f54866 |
| noarch | fence-agents-nutanix-ahv-4.10.0-110.el9_8.8.noarch.rpm | fdd6c7ca878701bf8cc53244cc377df74eb00e548c6123e95b633254d4d0a043 |
| noarch | fence-agents-apc-4.10.0-110.el9_8.8.noarch.rpm | fe927769c4d49336c8d2e94ee945f85d65547e1ee897533eb0b002f9a3f0a6c3 |
| ppc64le | fence-agents-openstack-4.10.0-110.el9_8.8.ppc64le.rpm | 9336b25bdedce3f10957fa19967f2fa7b06c416dbd6bbcbcb3dcedc5bb72be48 |
| ppc64le | fence-agents-compute-4.10.0-110.el9_8.8.ppc64le.rpm | 946b392605db0d8bd25620b9b1554c6492b102b8de73c3594de48bfb00cc3d97 |
| ppc64le | ha-cloud-support-4.10.0-110.el9_8.8.ppc64le.rpm | a2552e1e8e3d2fe495877147b58ac047d60c2379c55d1388d841679f248cca3a |
| ppc64le | fence-agents-kdump-4.10.0-110.el9_8.8.ppc64le.rpm | bc0244dd412b0a19a9a578a415cec0ee55d51b53d01e49df737b6e2ab8d5c41a |
| s390x | fence-agents-kdump-4.10.0-110.el9_8.8.s390x.rpm | 24e0341e345c2b277729e17523d3f6b7f12bca5707259c5a5afea8c54abec16f |
| s390x | fence-agents-redfish-4.10.0-110.el9_8.8.s390x.rpm | a94f50982aa14d1ea21f9ce0314f9d8797c26d6c544dd241c75eb050d305c62a |
| x86_64 | fence-agents-gce-4.10.0-110.el9_8.8.x86_64.rpm | 13a92da25b974f1cc68850112b3d117e06ca0bbf8a04904620ecd7be89886e83 |
| x86_64 | fence-virt-4.10.0-110.el9_8.8.x86_64.rpm | 185fd9fa9f53df592d647a6e99658d5201d3b82f7ea3f376e8d422c8f3f390ee |
| x86_64 | fence-virtd-serial-4.10.0-110.el9_8.8.x86_64.rpm | 21998b80e600e47609ca7821c5ebdaf3d26e40dd96376ce9bdddec69ec62df03 |
| x86_64 | fence-virtd-multicast-4.10.0-110.el9_8.8.x86_64.rpm | 37e45534097958c0f71e61d85439fc62c2d23abdf04cdf54acd042f3e4586dea |
| x86_64 | ha-cloud-support-4.10.0-110.el9_8.8.x86_64.rpm | 4defe44747ae81ef1933800d579c23a5467bb9c30a9e8b97d4b10846b46123bb |
| x86_64 | fence-agents-compute-4.10.0-110.el9_8.8.x86_64.rpm | 57a76c7bd3f27c7c285cbda2c44e26538d24b34e6954f159fbbaec7e345dd4c1 |
| x86_64 | fence-agents-aws-4.10.0-110.el9_8.8.x86_64.rpm | 60a87753ad1af7d11721c3e5f1b0e760280db51f9a5c717a083c111548fc00e7 |
| x86_64 | fence-agents-kdump-4.10.0-110.el9_8.8.x86_64.rpm | 628c49da3146eec4fcfe478efb1b7edd432ba7bce5067df6ac0a1c31746b94d6 |
| x86_64 | fence-agents-aliyun-4.10.0-110.el9_8.8.x86_64.rpm | 6f6cc7a104fa9eb1d1b3a69b97fa187a6e78e69c3cdd0467d0d134d29cc5c523 |
| x86_64 | fence-agents-azure-arm-4.10.0-110.el9_8.8.x86_64.rpm | 7b3f6233204bb503274945ed37e4f71b81dbe12b79e74d9e0e9b4a4d516e69e3 |
| x86_64 | fence-virtd-libvirt-4.10.0-110.el9_8.8.x86_64.rpm | 7c246bd73d33d8cc994788d782436b70c1e2f4b0b7ef63a2389bb944026be993 |
| x86_64 | fence-agents-all-4.10.0-110.el9_8.8.x86_64.rpm | d2db9ca9e0ffae47ee85c44a9ddc2612966f3d83a955c86a969381d7b5ddc675 |
| x86_64 | fence-agents-redfish-4.10.0-110.el9_8.8.x86_64.rpm | e1739476b41c566ff231f4a9520f391d33ddc72fbde87af50a0bff3a243e356d |
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
Frequently Asked Questions
What is ALSA-2026:94500?
Who is affected?
How do I apply the fix?
Why do fence-agent flaws matter?
References
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System