Back to Security Advisories

Resource-Agents Security Update — AlmaLinux 8 (ALSA-2026:47126)

This is a security release for AlmaLinux 8. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.

Medium 5.3 CVSS
AlmaLinux 8

Fix Commands

EL8+ (AlmaLinux/CloudLinux/Rocky)

sudo dnf update

What this means under a SharedLicense license

resource-agents on AlmaLinux 8 is the exposure surface; the advisory's own severity data tops out at CVSS 5.3 (CWE-200).

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.

Security Fix(es):

* urllib3: urllib3: Information disclosure via cross-origin redirects forwarding…

Type:

security

Severity:

moderate

Release date:

2026-08-06

Description:

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.

Security Fix(es):

* urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture Package Checksum
ppc64le resource-agents-paf-4.9.0-54.el8_10.36.alma.1.ppc64le.rpm 00fa3ab60c90d7940b3c3025e4729deec2fcad08b333e71652fac8b41013d543
ppc64le resource-agents-4.9.0-54.el8_10.36.alma.1.ppc64le.rpm 8d15c4b65dd4d840fc71e50ff70e5efa02a59659de05ff9fea1290d6560836a7
s390x resource-agents-4.9.0-54.el8_10.36.alma.1.s390x.rpm 176a8f618dd71fcd09db2aba74c79be1b788131a2553a987d4ca13ca4d1be9eb
s390x resource-agents-paf-4.9.0-54.el8_10.36.alma.1.s390x.rpm 697fcd7613d7057e400eee6e6691ff4ae8ec78fc9faa1728d5cdfd7c81250621
x86_64 resource-agents-4.9.0-54.el8_10.36.alma.1.x86_64.rpm 12dee705d86aba63cc061c2975b8f62a057fb9e924b5a8f1220c4e30c85590dd
x86_64 resource-agents-paf-4.9.0-54.el8_10.36.alma.1.x86_64.rpm 6776220174f20be20d8c7e4ed440d2036812a9d2536615e698d686a3d4abe0eb
x86_64 resource-agents-aliyun-4.9.0-54.el8_10.36.alma.1.x86_64.rpm 755c875bd52c0b10e606d236b8912aaef3b3e967040b68218cf754529f7e083e
x86_64 resource-agents-gcp-4.9.0-54.el8_10.36.alma.1.x86_64.rpm e3b222a199ce9695f59bf100282617a18229db24d7a9286d85a5ab876af72d09

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

Frequently Asked Questions

What does ALSA-2026:47126 fix?
1 CVEs in resource-agents, including the listed flaws (CVE-2026-44431).
Which release is covered?
AlmaLinux 8.
How do I apply it?
dnf update resource-agents — restart the service if it runs persistently.

References

Security Advisories

Related Advisories

Perl-CGI Security Update — AlmaLinux 8 (ALSA-2026:99849)

2026-11-12

.NET 8.0 Security Update — AlmaLinux 8 (ALSA-2026:99052)

2026-11-12

Grafana Security Update — AlmaLinux 8 (ALSA-2026:99030)

2026-11-12

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System