An update for fence-agents is now available for Red Hat Enterprise Linux 9.

The fence-agents packages provide a collection of scripts for handling remote
 power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* fence-agents: Jinja has a sandbox breakout through indirect reference to
 format method [rhel-9.5.z] (CVE-2024-56326)

* fence-agents: Jinja has a sandbox breakout through malicious filenames
 [rhel-9.5.z] (CVE-2024-56201)

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2024-56201: Improper Neutralization of Escape, Meta, or Control Sequences
 (CWE-150)
CVE-2024-56326: Protection Mechanism Failure (CWE-693)