Red Hat Product Errata RHSA-2026:22330 - Security Advisory Issued: 2026-06-01 Updated: 2026-06-01 RHSA-2026:22330 - Security Advisory Overview Updated Packages Synopsis Important: fence-agents security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for fence-agents is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves (CVE-2026-26007) pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux High Availability for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux Resilient Storage for x86_64 - 4 years of updates 9.2 x86_64 Red Hat Enterprise Linux Resilient Storage for Power, little endian - 4 years of updates 9.2 ppc64le Red Hat Enterprise Linux Resilient Storage for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux High Availability for x86_64 - Advanced Update Support 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle 9.2 s390x Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle 9.2 s390x Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle 9.2 x86_64 Fixes BZ - 2438762 - CVE-2026-26007 cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves BZ - 2447194 - CVE-2026-32597 pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) CVEs CVE-2026-26007 CVE-2026-32597 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM fence-agents-4.10.0-43.el9_2.21.src.rpm SHA-256: 0e47b5ba3b66d6cfacc996665c1c30bb879fdbf6b3df015c99bc4427a72dd43f x86_64 fence-agents-common-4.10.0-43.el9_2.21.noarch.rpm SHA-256: 9bb9e47ab80de93603432d9671576dffe8f4fd234b2cb62105b29a40461b6dcb fence-agents-compute-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: cab3b1230e4c2204e1cd270a54fbe34f9d9626f3a812925618e373ea6a8b326f fence-agents-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: ce1923980ae12d74e184fa8248337d6085b41898acbf16b5cf8ac62747bb09f2 fence-agents-debugsource-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: 44735c03e0e252bc49624f2b0c4978aedba29e1eee5401eb67d57cd2d5e5f9b6 fence-agents-ibm-powervs-4.10.0-43.el9_2.21.noarch.rpm SHA-256: d2277e20048af19e38689a455a770e3d4b5560f5b1ab19968877a8bad7d53ed9 fence-agents-ibm-vpc-4.10.0-43.el9_2.21.noarch.rpm SHA-256: e3ba24e0c6f900204ef5a51c4473ae48ff122e562fe2aaf8e4383ff7e0e057fe fence-agents-kdump-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: 541f5c3823c2113bb12f8f8e787c55f29df4201f9149ee11c06bd84f758ef217 fence-agents-kubevirt-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: b12d295a2e0d4f7706bd276dcf08ad0ca83e892b465b20f4992f6048548a676e fence-agents-kubevirt-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: b507090377b7b0bf2b495db3147886056698aa2cc20ab65110e36519fac9ca72 fence-agents-virsh-4.10.0-43.el9_2.21.noarch.rpm SHA-256: cf2c6295154e4a0845d945e80ac4223dc2877d763b1d2fa1596b32626d35633d fence-virt-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: e6c21005520269832c99729e3918a320e4ed70374499cda941d9334918480cad fence-virt-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: 96af7f942053369b508fb84b64a25ec41cadddb271a6194b50d439e1d8aab823 fence-virtd-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: a95f79d3df5249730e7cc45f6e2d6738e7995625751bb0b55324e995e364fc9d fence-virtd-cpg-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: 1165751360a333768fbe9e7f06441ccdd7de14a91f228d399908daa4d7791edb fence-virtd-cpg-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: 7190c471572c6ca0fcd41558a0d6c1aa31900b367d071eee8767c85680d84211 fence-virtd-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: ee4f5676ba381ec7aad58959f62913a2a9cff721ba503052b865c65c1998d35d fence-virtd-libvirt-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: a1fbac3d66a28294029de01c4a46a5790f0dab00615a462800042c19fe288a09 fence-virtd-libvirt-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: 27965cd85452861fe590b4844e8c6b497931e112b575e6407fa15db7297d8ae8 fence-virtd-multicast-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: a600011cc64c6c4b919cf799e0af30e108626f48c1b29382c7ff384922edac6e fence-virtd-multicast-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: 169b08cae5552a863f0d7f6f802853ac43f979440e900a3491f54a0f73a2ba1c fence-virtd-serial-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: 672f13069293b306d2991d68842213b068e7174bdcd77b22505b17179b25b321 fence-virtd-serial-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: bb225514deafec44b01d9901c2e8648e48892c4579c2048cf507d6e29feca8c1 fence-virtd-tcp-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: 2bb85bdc278f7d24c759c2f86ea43d048f9770a7b0fd62f3132cae17fc308f32 fence-virtd-tcp-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: e8ad0d642a8160ee7ce65a15712ab41315ff2a0f61f31c103efa33407c47c9cf ha-cloud-support-debuginfo-4.10.0-43.el9_2.21.x86_64.rpm SHA-256: adb94dd528a0d584763a8bef55be0d1a21ae6d1736c645b8c2a13223f1970b04 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM fence-agents-4.10.0-43.el9_2.21.src.rpm SHA-256: 0e47b5ba3b66d6cfacc996665c1c30bb879fdbf6b3df015c99bc4427a72dd43f ppc64le fence-agents-common-4.10.0-43.el9_2.21.noarch.rpm SHA-256: 9bb9e47ab80de93603432d9671576dffe8f4fd234b2cb62105b29a40461b6dcb fence-agents-compute-4.10.0-43.el9_2.21.ppc64le.rpm SHA-256: 2713edcb9927e962454ab50344186276e0359cc2c0f02b35c87cc320e1e30171 fence-agents-debuginfo-4.10.0-43.el9_2.21.ppc64le.rpm SHA-256: 23dee28b31cc996c5e5ab1d909856c7259e651f583dbaa309d83ebb29e65c4ea fence-agents-debugsource-4.10.0-43.el9_2.21.ppc64le.rpm SHA-256: 594ad72344aa9c06eec06b6912637176c730e1d3c3144ded57751bcd927d372c fence-agents-ibm-powervs-4.10.0-43.el9_2.21.noarch.rpm SHA-256: d2277e20048af19e38689a455a770e3d4b5560f5b1ab19968877a8bad7d53ed9 fence-agents-ibm-vpc-4.10.0-43.el9_2.21.noarch.rpm SHA-256: e3ba24e0c6f900204ef5a51c4473ae48ff122e562fe2aaf8e4383ff7e0e057fe fence-agents-kdump-debuginfo-4.10.0-43.el9_2.21.ppc64le.rpm SHA-256: db3e837c5b090fcb8720cf3a9423c8e820a66c9f0f8b03d78e1b1d2970838eff fence-agents-kubevirt-4.10.0-43.el9_2.21.ppc64le.rpm SHA-256: 6dbdd9f907adffe9fa344c27ff6efbdc966c2547950161812b13c4b9f2293865 fence-agents-kubevirt-debuginfo-4.10.0-43.el9_2.21.ppc64le.rpm SHA-256: 038e674f0abbae8e3fd8e0b35fc6463df163293fce1015e0941734610ee436e5 fence-agents-virsh-4.10.0-43.el9_2.21.noarch.rpm SHA-256: cf2c6295154e4a0845d945e80ac4223dc2877d763b1d2fa1596b32626d35633d Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 9.2 SRPM ppc64le fence-agents-all-4.10.0-43.el9_2.21.ppc64le.rpm SHA-256: 3ae64e00d3523cb766f9cbfcce2b49cdb27da24655250db37c5972792790bd76 fence-agents-amt-ws-4.10.0-43.el9_2.21.noarch.rpm SHA-256: 77e3f4e27f1053eb0e5749f3ccc403517f3d9c1d60413e525ce468ddce87331e fence-agents-apc-4.10.0-43.el9_2.21.noarch.rpm SHA-256: dd7ba121837b12cb532839d6f1a735e5d1399480e4c53f42a8e293761f3cb54a fence-agents-apc-snmp-4.10.0-43.el9_2.21.noarch.rpm SHA-256: 12a98652c5d9c2267a9df7780f721d0017ec3ca99bfd598eea71ffef41232f24 fence-agents-bladecenter-4.10.0-43.el9_2.21.noarch.rpm SHA-256: bacb92796a79b66eb3f1e6bd1a8793b619c2b098c2841ae8b81e3ba8a3f521d3 fence-agents-brocade-4.10.0-43.el9_2.21.noarch.rpm SHA-256: 7289cfc23e36ad6f9ad95f4340d2b5f6c1d5257479ebe099182c5a71b77f2180 fence-agents-cisco-mds-4.10.0-43.el9_2.21.noarch.rpm SHA-256: 98b2b27e0ebeef9d2ff18d26dfe0709b7d0449d08da385094377efb19904e499 fence-agents-cisco-ucs-4.10.0-43.el9_2.21.noarch.rpm SHA-256: 19a0120984bdcfdb