fence-agents-4.2.1-129.el8_10.27

The fence-agents packages provide a collection of scripts for handling remote
power management for cluster devices. They allow failed or unreachable nodes to
be forcibly restarted and removed from the cluster.

Security Fix(es):

* httplib2: httplib2: Denial of Service via unbounded decompression of HTTP
response bodies (CVE-2026-59939)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2026-59939
httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0,
httplib2 performs unbounded decompression of HTTP response bodies encoded with
Content-Encoding: gzip or deflate in _decompressContent in httplib2/init.py,
allowing a malicious or compromised HTTP server to return a small compressed
payload that expands to an arbitrarily large size in memory and causes
MemoryError or OOM-kill in the client process. This issue is fixed in version
0.32.0.