Red Hat Product Errata RHSA-2026:47129 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47129 - Security Advisory Overview Updated Packages Synopsis Moderate: resource-agents security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for resource-agents is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Red Hat Enterprise Linux High Availability for x86_64 - Telecommunications Update Service 8.8 x86_64 Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Fixes BZ - 2477167 - CVE-2026-44431 urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVEs CVE-2026-44431 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 8.8 SRPM resource-agents-4.9.0-40.el8_8.20.src.rpm SHA-256: d2153e17a507feda10d5f57814cfb55d02af49b622d5c1f7c459aa4bae3c6b9b ppc64le resource-agents-4.9.0-40.el8_8.20.ppc64le.rpm SHA-256: bb02c8b59515de3e39f34615522a7ac7f535628872b688317f28d588275dc7c6 resource-agents-debuginfo-4.9.0-40.el8_8.20.ppc64le.rpm SHA-256: 6801705303707d344b2abb4f270411d14ebd0d48893de7d1ed51b45ddabdbdd3 resource-agents-debugsource-4.9.0-40.el8_8.20.ppc64le.rpm SHA-256: 26806c51ae633abb0661e4399ce334a521780979d7ed8f2a74c8523af6d3ebf8 resource-agents-paf-4.9.0-40.el8_8.20.ppc64le.rpm SHA-256: 9f99086a053bee3cfb4a26b29c6f3e14db60301e33e5aa4425224a77ce8acbba Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions 8.8 SRPM resource-agents-4.9.0-40.el8_8.20.src.rpm SHA-256: d2153e17a507feda10d5f57814cfb55d02af49b622d5c1f7c459aa4bae3c6b9b x86_64 resource-agents-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 49184f8f81d1a865c3cd8138ae0331e0d3f4b682930e1b50c07102f2066cf015 resource-agents-aliyun-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 4f2700ab4c34d1982d2dccbac581b4a92554528d401b185a59ff542eb4b7f79f resource-agents-aliyun-debuginfo-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 78d9eb029acd1784bc3d3ce09f0e95f258a5bed323529dedfcbf43f53a0ca6d8 resource-agents-debuginfo-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 817fa0c29aa4cbc69dda9792409c930e041ebe54c72c4c35d72b0c689eccdf66 resource-agents-debugsource-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 326c5edd694170cc1bbb05f4a24a89395aed086e89de1d0729bd88434d70a0b5 resource-agents-gcp-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 3dd33acdc099f93bec5ac45b317460eb57be079460b8ef42377da48af60c03c3 resource-agents-paf-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: a386e5ec4f4fcf5511ac7ae4af12d8787481de24f549360c0306ab4cfd0389ff Red Hat Enterprise Linux High Availability for x86_64 - Telecommunications Update Service 8.8 SRPM resource-agents-4.9.0-40.el8_8.20.src.rpm SHA-256: d2153e17a507feda10d5f57814cfb55d02af49b622d5c1f7c459aa4bae3c6b9b x86_64 resource-agents-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 49184f8f81d1a865c3cd8138ae0331e0d3f4b682930e1b50c07102f2066cf015 resource-agents-aliyun-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 4f2700ab4c34d1982d2dccbac581b4a92554528d401b185a59ff542eb4b7f79f resource-agents-aliyun-debuginfo-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 78d9eb029acd1784bc3d3ce09f0e95f258a5bed323529dedfcbf43f53a0ca6d8 resource-agents-debuginfo-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 817fa0c29aa4cbc69dda9792409c930e041ebe54c72c4c35d72b0c689eccdf66 resource-agents-debugsource-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 326c5edd694170cc1bbb05f4a24a89395aed086e89de1d0729bd88434d70a0b5 resource-agents-gcp-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 3dd33acdc099f93bec5ac45b317460eb57be079460b8ef42377da48af60c03c3 resource-agents-paf-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: a386e5ec4f4fcf5511ac7ae4af12d8787481de24f549360c0306ab4cfd0389ff Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Long Life 8.8 SRPM resource-agents-4.9.0-40.el8_8.20.src.rpm SHA-256: d2153e17a507feda10d5f57814cfb55d02af49b622d5c1f7c459aa4bae3c6b9b x86_64 resource-agents-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 49184f8f81d1a865c3cd8138ae0331e0d3f4b682930e1b50c07102f2066cf015 resource-agents-aliyun-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 4f2700ab4c34d1982d2dccbac581b4a92554528d401b185a59ff542eb4b7f79f resource-agents-aliyun-debuginfo-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 78d9eb029acd1784bc3d3ce09f0e95f258a5bed323529dedfcbf43f53a0ca6d8 resource-agents-debuginfo-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 817fa0c29aa4cbc69dda9792409c930e041ebe54c72c4c35d72b0c689eccdf66 resource-agents-debugsource-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 326c5edd694170cc1bbb05f4a24a89395aed086e89de1d0729bd88434d70a0b5 resource-agents-gcp-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: 3dd33acdc099f93bec5ac45b317460eb57be079460b8ef42377da48af60c03c3 resource-agents-paf-4.9.0-40.el8_8.20.x86_64.rpm SHA-256: a386e5ec4f4fcf5511ac7ae4af12d8787481de24f549360c0306ab4cfd0389ff The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .