← Search the atlas
ALSA-2026:1905
Not scored
Important: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Exploit probability
Not scored
Published
February 4, 2026
Required by
Not available
Last source change
May 26, 2026
02 / AFFECTED SOFTWARE
Affected packages
AlmaLinux:10
fence-agents-ilo-mp
AlmaLinux:10
fence-agents-rhevm
AlmaLinux:10
fence-agents-rsb
AlmaLinux:10
fence-agents-vmware-rest
AlmaLinux:10
fence-agents-ilo-ssh
AlmaLinux:10
fence-agents-virsh
AlmaLinux:10
fence-agents-scsi
AlmaLinux:10
fence-agents-eaton-snmp
AlmaLinux:10
fence-agents-wti
AlmaLinux:10
fence-agents-rsa
AlmaLinux:10
fence-agents-ipdu
AlmaLinux:10
fence-agents-cisco-mds
AlmaLinux:10
fence-agents-mpath
AlmaLinux:10
fence-agents-amt-ws
AlmaLinux:10
fence-agents-apc-snmp
AlmaLinux:10
fence-agents-lpar
AlmaLinux:10
fence-agents-ilo-moonshot
AlmaLinux:10
fence-agents-ibm-powervs
AlmaLinux:10
fence-agents-heuristics-ping
AlmaLinux:10
fence-agents-ilo2
AlmaLinux:10
fence-agents-intelmodular
AlmaLinux:10
fence-agents-eps
AlmaLinux:10
fence-agents-apc
AlmaLinux:10
fence-agents-bladecenter
AlmaLinux:10
fence-agents-cisco-ucs
AlmaLinux:10
fence-agents-nutanix-ahv
AlmaLinux:10
fence-agents-ibmblade
AlmaLinux:10
fence-agents-brocade
AlmaLinux:10
fence-agents-drac5
AlmaLinux:10
fence-agents-vmware-soap
AlmaLinux:10
fence-agents-hpblade
AlmaLinux:10
fence-agents-emerson
AlmaLinux:10
fence-agents-sbd
AlmaLinux:10
fence-agents-ifmib
AlmaLinux:10
fence-agents-ibm-vpc
AlmaLinux:10
fence-agents-ipmilan
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
ALSA-2026:1905
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
View original source ↗
05 / REFERENCES
Further evidence