- What: Red Hat releases resource-agents security update
- Impact: Addresses information disclosure vulnerability in resource management scripts
Red Hat Product Errata RHSA-2026:47126 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47126 - Security Advisory Overview Updated Packages Synopsis Moderate: resource-agents security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for resource-agents is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux High Availability for x86_64 8 x86_64 Red Hat Enterprise Linux High Availability for ARM 64 8 aarch64 Red Hat Enterprise Linux Resilient Storage for x86_64 8 x86_64 Red Hat Enterprise Linux Resilient Storage for IBM z Systems 8 s390x Red Hat Enterprise Linux High Availability for IBM z Systems 8 s390x Red Hat Enterprise Linux Resilient Storage for Power, little endian 8 ppc64le Red Hat Enterprise Linux High Availability for Power, little endian 8 ppc64le Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle 8.10 s390x Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle 8.10 s390x Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle 8.10 x86_64 Fixes BZ - 2477167 - CVE-2026-44431 urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVEs CVE-2026-44431 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux High Availability for x86_64 8 SRPM resource-agents-4.9.0-54.el8_10.36.src.rpm SHA-256: 986d3869939197c179cddc5abf1555a19351fca62a9ac8ade6d236e9c17c7568 x86_64 resource-agents-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 8535d2ff325abc2966b8f3d110adedfddcf37dfd130cd08ab93fd56ab98f4c5f resource-agents-aliyun-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 1854d530ebf1730e2d89c8c5e778d2329af0bff9e385c180590b8a543cd657fe resource-agents-aliyun-debuginfo-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 734d83c08d0cfabe5f16734b3d29c690af97da9c930fe4c8483964ad6ae1e6fb resource-agents-debuginfo-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 6838f701e97e374690c19e4a27f06a45faa69dad5979945055c7d51471f7a9bb resource-agents-debugsource-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 20d09d10b515bbdafd10661ff05afaa8ef8328b6e195fc7e89a960b036e1f8ff resource-agents-gcp-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 363beb6604b9fb3d7101e696e1212facdef79becede290ef9446dd0977ebbbf7 resource-agents-paf-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: af197930881873f5457ef9fa742af4d5273c9332b399f6404fd8d02561d44594 Red Hat Enterprise Linux High Availability for ARM 64 8 SRPM resource-agents-4.9.0-54.el8_10.36.src.rpm SHA-256: 986d3869939197c179cddc5abf1555a19351fca62a9ac8ade6d236e9c17c7568 aarch64 resource-agents-4.9.0-54.el8_10.36.aarch64.rpm SHA-256: 86625ac33f97509d5a97cf7c3526cc59382107b6df455afae91c6f17923e1712 resource-agents-debuginfo-4.9.0-54.el8_10.36.aarch64.rpm SHA-256: bb17e2284158edd3034e83fa40600b3b6652a36725cc910327fe0b7408b38b4a resource-agents-debugsource-4.9.0-54.el8_10.36.aarch64.rpm SHA-256: 4315865af83a8a35cd30a95ea701e2c3c6cf65412043aef0afdff1cf1fd537e5 resource-agents-paf-4.9.0-54.el8_10.36.aarch64.rpm SHA-256: 83f976edfb39fa078cd0cd0d18428e71ff7e9ce3c245f905ff89e88df1504a38 Red Hat Enterprise Linux Resilient Storage for x86_64 8 SRPM resource-agents-4.9.0-54.el8_10.36.src.rpm SHA-256: 986d3869939197c179cddc5abf1555a19351fca62a9ac8ade6d236e9c17c7568 x86_64 resource-agents-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 8535d2ff325abc2966b8f3d110adedfddcf37dfd130cd08ab93fd56ab98f4c5f resource-agents-aliyun-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 1854d530ebf1730e2d89c8c5e778d2329af0bff9e385c180590b8a543cd657fe resource-agents-aliyun-debuginfo-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 734d83c08d0cfabe5f16734b3d29c690af97da9c930fe4c8483964ad6ae1e6fb resource-agents-debuginfo-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 6838f701e97e374690c19e4a27f06a45faa69dad5979945055c7d51471f7a9bb resource-agents-debugsource-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 20d09d10b515bbdafd10661ff05afaa8ef8328b6e195fc7e89a960b036e1f8ff resource-agents-gcp-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: 363beb6604b9fb3d7101e696e1212facdef79becede290ef9446dd0977ebbbf7 resource-agents-paf-4.9.0-54.el8_10.36.x86_64.rpm SHA-256: af197930881873f5457ef9fa742af4d5273c9332b399f6404fd8d02561d44594 Red Hat Enterprise Linux Resilient Storage for IBM z Systems 8 SRPM resource-agents-4.9.0-54.el8_10.36.src.rpm SHA-256: 986d3869939197c179cddc5abf1555a19351fca62a9ac8ade6d236e9c17c7568 s390x resource-agents-4.9.0-54.el8_10.36.s390x.rpm SHA-256: 249a3fcc86cd855428fce7048a62423592f8e83b33a7563f0311b3bf3c8bfa22 resource-agents-debuginfo-4.9.0-54.el8_10.36.s390x.rpm SHA-256: 1b06f7409b784f20b48bc9027ca26b617767d8f27fbc1df2b1b3930bcde4b6a1 resource-agents-debugsource-4.9.0-54.el8_10.36.s390x.rpm SHA-256: 1fed6925439320014b43cec0019926994ec996a0d07fd42d0e3a4bbf9bf32da1 resource-agents-paf-4.9.0-54.el8_10.36.s390x.rpm SHA-256: d298397e6148b953da4f8dbeffbc2159cecb665cfe645b710731034d28d4e055 Red Hat Enterprise Linux High Availability for IBM z Systems 8 SRPM resource-agents-4.9.0-54.el8_10.36.src.rpm SHA-256: 986d3869939197c179cddc5abf1555a19351fca62a9ac8ade6d236e9c17c7568 s390x resource-agents-4.9.0-54.el8_10.36.s390x.rpm SHA-256: 249a3fcc86cd855428fce7048a62423592f8e83b33a7563f0311b3bf3c8bfa22 resource-agents-debuginfo-4.9.0-54.el8_10.36.s390x.rpm SHA-256: 1b06f7409b784f20b48bc9027ca26b617767d8f27fbc1df2b1b3930bcde4b6a1 resource-agents-debugsource-4.9.0-54.el8_10.36.s390x.rpm SHA-256: 1fed6925439320014b43cec0019926994ec996a0d07fd42d0e3a4bbf9bf32da1 resource-agents-paf-4.9.0-54.el8_10.36.s390x.rpm SHA-256: d298397e6148b953da4f8dbeffbc2159cecb665cfe645b710731034d28d4e055 Red Hat Enterprise Linux Resilient Storage for Power, little endian 8 SRPM resource-agents-4.9.0-54.el8_10.36.src.rpm SHA-256: 986d3869939197c179cddc5abf1555a19351fca62a9ac8ade6d236e9c17c7568 ppc64le resource-agents-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: feee587bd5ddb55880808f3569ea6a165393c100f942ef2164fe4a471e1efecf resource-agents-debuginfo-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: d8d2ebdfa147369659903a952efcbafea6489d62d980766c6f5f1eaa52b63b7c resource-agents-debugsource-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: 63f8afba5ffab76103e240297b4525d1e9cf5145fc0712f18d21334a67eb5885 resource-agents-paf-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: 8de55ac42801cf0029a3c012ad132cf26069e4932203049f421dbb0bb348256f Red Hat Enterprise Linux High Availability for Power, little endian 8 SRPM resource-agents-4.9.0-54.el8_10.36.src.rpm SHA-256: 986d3869939197c179cddc5abf1555a19351fca62a9ac8ade6d236e9c17c7568 ppc64le resource-agents-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: feee587bd5ddb55880808f3569ea6a165393c100f942ef2164fe4a471e1efecf resource-agents-debuginfo-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: d8d2ebdfa147369659903a952efcbafea6489d62d980766c6f5f1eaa52b63b7c resource-agents-debugsource-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: 63f8afba5ffab76103e240297b4525d1e9cf5145fc0712f18d21334a67eb5885 resource-agents-paf-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: 8de55ac42801cf0029a3c012ad132cf26069e4932203049f421dbb0bb348256f Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle 8.10 SRPM resource-agents-4.9.0-54.el8_10.36.src.rpm SHA-256: 986d3869939197c179cddc5abf1555a19351fca62a9ac8ade6d236e9c17c7568 aarch64 resource-agents-4.9.0-54.el8_10.36.aarch64.rpm SHA-256: 86625ac33f97509d5a97cf7c3526cc59382107b6df455afae91c6f17923e1712 resource-agents-debuginfo-4.9.0-54.el8_10.36.aarch64.rpm SHA-256: bb17e2284158edd3034e83fa40600b3b6652a36725cc910327fe0b7408b38b4a resource-agents-debugsource-4.9.0-54.el8_10.36.aarch64.rpm SHA-256: 4315865af83a8a35cd30a95ea701e2c3c6cf65412043aef0afdff1cf1fd537e5 resource-agents-paf-4.9.0-54.el8_10.36.aarch64.rpm SHA-256: 83f976edfb39fa078cd0cd0d18428e71ff7e9ce3c245f905ff89e88df1504a38 Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle 8.10 SRPM resource-agents-4.9.0-54.el8_10.36.src.rpm SHA-256: 986d3869939197c179cddc5abf1555a19351fca62a9ac8ade6d236e9c17c7568 ppc64le resource-agents-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: feee587bd5ddb55880808f3569ea6a165393c100f942ef2164fe4a471e1efecf resource-agents-debuginfo-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: d8d2ebdfa147369659903a952efcbafea6489d62d980766c6f5f1eaa52b63b7c resource-agents-debugsource-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: 63f8afba5ffab76103e240297b4525d1e9cf5145fc0712f18d21334a67eb5885 resource-agents-paf-4.9.0-54.el8_10.36.ppc64le.rpm SHA-256: 8de55ac42801cf0029a3c012ad132cf26