RHSA-2026:1701

HIGH7.5

Red Hat Security Advisory: fence-agents security update

Published Feb 3, 2026

Modified Yesterday

Fix available

Affected Packages(53 packages)

fence-agents

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_e4s 8.8 highavailabilityRed Hat rhel_tus 8.8 appstreamRed Hat rhel_tus 8.8 highavailability

Fixed in:

0:4.2.1-112.el8_8.14

fence-agents-aliyun

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_e4s 8.8 highavailabilityRed Hat rhel_tus 8.8 appstreamRed Hat rhel_tus 8.8 highavailability

Fixed in:

0:4.2.1-112.el8_8.14

fence-agents-aliyun-debuginfo

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_e4s 8.8 highavailabilityRed Hat rhel_tus 8.8 appstreamRed Hat rhel_tus 8.8 highavailability

Fixed in:

0:4.2.1-112.el8_8.14

fence-agents-all

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_e4s 8.8 highavailabilityRed Hat rhel_tus 8.8 appstreamRed Hat rhel_tus 8.8 highavailability

Fixed in:

0:4.2.1-112.el8_8.14

fence-agents-amt-ws

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_e4s 8.8 highavailabilityRed Hat rhel_tus 8.8 appstreamRed Hat rhel_tus 8.8 highavailability

Fixed in:

0:4.2.1-112.el8_8.14

fence-agents-apc

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_e4s 8.8 highavailabilityRed Hat rhel_tus 8.8 appstreamRed Hat rhel_tus 8.8 highavailability

Fixed in:

0:4.2.1-112.el8_8.14

fence-agents-apc-snmp

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_e4s 8.8 highavailabilityRed Hat rhel_tus 8.8 appstreamRed Hat rhel_tus 8.8 highavailability

Fixed in:

0:4.2.1-112.el8_8.14

fence-agents-aws

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_e4s 8.8 highavailabilityRed Hat rhel_tus 8.8 appstreamRed Hat rhel_tus 8.8 highavailability

Fixed in:

0:4.2.1-112.el8_8.14

fence-agents-azure-arm

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_e4s 8.8 highavailabilityRed Hat rhel_tus 8.8 appstreamRed Hat rhel_tus 8.8 highavailability

Fixed in:

0:4.2.1-112.el8_8.14

fence-agents-bladecenter

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_e4s 8.8 highavailabilityRed Hat rhel_tus 8.8 appstreamRed Hat rhel_tus 8.8 highavailability

Fixed in:

0:4.2.1-112.el8_8.14

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:1701

REPORT

https://access.redhat.com/security/cve/CVE-2025-66418

ARTICLE

https://access.redhat.com/security/updates/classification/#important

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2419455

ARTICLE

https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8

ARTICLE

https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2025-66418

ADVISORY

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1701.json

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-66418

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2025-66418

Ecosystems

Red Hat rhel_e4s 8.8 appstream Red Hat rhel_e4s 8.8 highavailability Red Hat rhel_tus 8.8 appstream Red Hat rhel_tus 8.8 highavailability

Timeline

PublishedFeb 3, 2026

ModifiedMar 12, 2026