Red Hat Product Errata RHSA-2026:53365 - Security Advisory Issued: 2026-08-11 Updated: 2026-08-11 RHSA-2026:53365 - Security Advisory Overview Updated Packages Synopsis Important: fence-agents security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for fence-agents is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2500041 - CVE-2026-59886 pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVEs CVE-2026-59886 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM fence-agents-4.10.0-110.el9_8.6.src.rpm SHA-256: 2c8394bad8c309dbbd51f4a6db115d8aa72e2cb5bbdcda02e92c25bad6760605 x86_64 fence-agents-aliyun-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 4d210b5128b9b8ef3dd076752de8cae63b6be1ed3c25a574b52ee0c570453492 fence-agents-all-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: c57d4d569398dd264d6243a4ccb4c80dcf807d87ccc5fb125b6dfa81702c5d02 fence-agents-amt-ws-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 7ecaa267b97b1dd7829d71b9dd510cab52c7103f729920cc06abae8f059ab3c1 fence-agents-apc-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 4967b739113fc0a8611bbab83f7454c2aac1146d4b0efabe1f19e07b9f586532 fence-agents-apc-snmp-4.10.0-110.el9_8.6.noarch.rpm SHA-256: bd4ebb4ce34888e9af8eed2a0c6c6d6b643ce06134064c995ba523f35a15e6b5 fence-agents-aws-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: b1994c8e5ea267d42f92b93ad7d6e2d4f41130e23c722fcbae81cbfff9aa9356 fence-agents-azure-arm-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 71c16a571316b4e651d0f066839d9629d8556469beb33e75d8ece4cebb2d50eb fence-agents-bladecenter-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 5c299a3c43ffd601254ae9180cc0b15f1610f67562b303d443412a353dec14bf fence-agents-brocade-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 40ceb4c1d82c43c03a925dae269e72d6c7a69ee0c3d1e4417b777490e7961087 fence-agents-cisco-mds-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 7662495517784efd706874a6fc83c5969e7f1ccab0ddc9c1812864144ce830e6 fence-agents-cisco-ucs-4.10.0-110.el9_8.6.noarch.rpm SHA-256: cddb7eac7a297073a873eec2ab57a09cdd451be31be9a1a2d15a66e7bcda995a fence-agents-common-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 79315ce4c33c1022b0023573f9120151872066f68afc4ef3f4331c8a710899b4 fence-agents-compute-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 94136e9d6a429e4e23527d7c3b239e36ed21e4e222ad07242f72e5259dc8cbfd fence-agents-debuginfo-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: d76900ce816e15757a174fce0f9509b91013729b5f1b1e7ecd05aba7c4afdcbc fence-agents-debugsource-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: e4711adb964fcfe66f5be158d4affb542d1727e6886468c51a0ba0ac5c45d6b6 fence-agents-drac5-4.10.0-110.el9_8.6.noarch.rpm SHA-256: d98caaa2b2b3ffb807b6856479e87accb7bb8bc42dd0024a60331e080a535934 fence-agents-eaton-snmp-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 8af1c61eabea7da11f585f45c5e4e3ddc122f58b3838f702db2e60d2e74562d5 fence-agents-emerson-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 1e6d05f7ae2760c4b38b67e4dbb8dfc2aaf9e86984f5b4d897ca3afc0b53e87e fence-agents-eps-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 4902d4066adfe406c5fd3ec23c9c8d4a0ba2f5b31db45444cb07c76d75366612 fence-agents-gce-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 8bdffbc675b7e7dae550c8375078d1c139cca50cb059a15a7acacab29070677e fence-agents-heuristics-ping-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 0589a4b816c9a1b92543b501ef32bc707e85b2e7c711f41126496342fafb3cb3 fence-agents-hpblade-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 521c097f96d32ce688f9baa31db319732dba446775bcf468ac2e4eba6f1d3c8d fence-agents-ibm-powervs-4.10.0-110.el9_8.6.noarch.rpm SHA-256: ca3d0362477597ee219d5d5ff0283fd19e761dc689f0ee741630d328d49ae269 fence-agents-ibm-vpc-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 4b20cb3a7c8ec0cc03f706e407c47b3b89ac7ecc182e9b9585de0e9e8e6afe70 fence-agents-ibmblade-4.10.0-110.el9_8.6.noarch.rpm SHA-256: bdebd862e26eb520031583bdaa7e35a744000fac88b4e5e343910138979cd65a fence-agents-ifmib-4.10.0-110.el9_8.6.noarch.rpm SHA-256: d7ec617996fc69bc6e4ae21d44022a08ca68f4210ffec8c17be4c1cbcdf60ab3 fence-agents-ilo-moonshot-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 04d22d36768ae98b9184efd88a4e60e7bb2c491fbd84bb32fc0993e4b560e126 fence-agents-ilo-mp-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 0d677629d5f2ccbfdb7b4a56246db47599d1c4677505918154155f600a673794 fence-agents-ilo-ssh-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 8c382ff2d4e4acce38cbd36e2b941e429b6ed6c2c3a8e94987ad5d3f4ae839b7 fence-agents-ilo2-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 80fd4a713aae230c9e268436c8f2421eef4e60acdf818aea33c6e115cb6e06da fence-agents-intelmodular-4.10.0-110.el9_8.6.noarch.rpm SHA-256: f3c9557cfa6b4c7c6b6a45733e072e28da0a3b6012c54b5958c23f048dbe42b3 fence-agents-ipdu-4.10.0-110.el9_8.6.noarch.rpm SHA-256: a4eee2ed3e4782d05072d0009369a22b2fa17f9efe55e8765b0aba1435155830 fence-agents-ipmilan-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 16727ebd2043d720f28665ebc62e9ccf2fadb58d27a7b581335cb8fab605ac4a fence-agents-kdump-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: afec92398dfa3866386fc20e4e484b577e7a37e853c535ae74d0d63b37951a82 fence-agents-kdump-debuginfo-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 6084d332c039ce105ffe8c8226bf39d7987905b8070a2e7cda063e6cc0b1472c fence-agents-kubevirt-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 00978413be7436dfd4080955f5e2e692ca655fc07774850cde5e680a2bbdce69 fence-agents-kubevirt-debuginfo-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 0833fc9f83a994db46750ff01778005042b19a89df8ed04fed28adff3ed98dc6 fence-agents-lpar-4.10.0-110.el9_8.6.noarch.rpm SHA-256: d7a3f5285517b6b8e18a1bafcb13b06bc532fe50dc4d8f26340c96542bd30d64 fence-agents-mpath-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 2efea3dd422a76e4524928b63ac1148e4933950580af63ac6159c6a6ad89f384 fence-agents-nutanix-ahv-4.10.0-110.el9_8.6.noarch.rpm SHA-256: d387a40d5b2f0094ec2f1426a63da0af9482fd52bb5720ac6c337ff1df798f1e fence-agents-openstack-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 5f6293b3126301d03c4031dd2cc45f806a03ca0c08a71a74dfb9eb1e18fb621b fence-agents-redfish-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 6baef92bd75d16b50e08267c0bc30f0e29c1360f00196043aac5d3b776718a29 fence-agents-rhevm-4.10.0-110.el9_8.6.noarch.rpm SHA-256: b696034820d2ccfdf538855f4633162f30eb55c43688841a02b3d2ff2578665f fence-agents-rsa-4.10.0-110.el9_8.6.noarch.rpm SHA-256: b509cd4d0128b6fc7e31d8a5452e063e2829c4f3662838e4a397788c1ca124e1 fence-agents-rsb-4.10.0-110.el9_8.6.noarch.rpm SHA-256: ec07244d1ef4a17d058ddd90c9c0af91d5796addb52a819f8ea27bf3d4d1454c fence-agents-sbd-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 734c19cbfb0ef5aca715842bc6730283b486a5c358d3017df35774e59dbd4f68 fence-agents-scsi-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 694d75f514de9971438f31dfb8122d36aacaa691805e197479f449842137ab24 fence-agents-virsh-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 634c6b8d023ea568b840ccc14eb737b53d1e3d0eea4a8de7babb885f5fb54a25 fence-agents-vmware-rest-4.10.0-110.el9_8.6.noarch.rpm SHA-256: b059e930e9c39b3b2f2dd43898ce3dc8959727e398d53d848d4988cbe098a7ea fence-agents-vmware-soap-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 758a997a4b16cbad78425d7eee16f3f5c3fe14acfaa3863f4699720b66a03064 fence-agents-wti-4.10.0-110.el9_8.6.noarch.rpm SHA-256: 0eccf543f61c29fb228a2d7b9db20fdef31cd86f55270c6cca7e053d2ab08164 fence-virt-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 1ce1f9cbb27b33b9c6b52a0afac499d17f401a7e117e4882d4b0f910cb0edeea fence-virt-debuginfo-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: d27ec825018ece11db2d4de284204247948967c8f55edf8292a5f71856ac5179 fence-virtd-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 6c023860ee6f990adb45b4f94993251f0cc95944ee07f8cf5caa34e7b186c7f0 fence-virtd-cpg-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: 794e4331b1510100d544537102ff944228b2aca856358857bd031f81193d211d fence-virtd-cpg-debuginfo-4.10.0-110.el9_8.6.x86_64.rpm SHA-256: c6289e7532627ab80b7e67719fd4c08977aa9c5b84138dd3e56bc86d9441c119 fence
A denial-of-service vulnerability (CVE-2026-59886, CVSS 7.5 HIGH) exists in the `pyasn1` library used by Red Hat's fence-agents, where crafted ASN.1 REAL values can cause resource exhaustion. The underlying `pyasn1` library is affected in all versions prior to 0.6.4. The fix requires updating the fence-agents package to the version provided in the Red Hat advisory for RHEL 9.