Red Hat Security Advisory: resource-agents security update
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
The resource-agents packages for Red Hat Enterprise Linux provide scripts for high-availability service managers. This advisory fixes three vulnerabilities in the urllib3 library used by these packages: CVE-2025-66418 (unbounded decompression chain causing resource exhaustion), CVE-2025-66471 (improper handling of highly compressed data in the streaming API), and CVE-2026-21441 (decompression-bomb safeguard bypass when following HTTP redirects in the streaming API). These vulnerabilities could lead to resource exhaustion or bypass of decompression safeguards, potentially affecting system stability and security in high-availability environments. The advisory includes updated resource-agents packages for multiple architectures and variants of Red Hat Enterprise Linux 8.
Potential Impact
The vulnerabilities can cause resource exhaustion due to unbounded decompression chains and improper handling of compressed data, which may lead to denial of service or degraded performance in high-availability systems. Additionally, the decompression-bomb safeguard bypass could allow attackers to circumvent protections designed to prevent resource exhaustion attacks via HTTP redirects. These impacts affect systems running the affected versions of Red Hat Enterprise Linux High Availability and Resilient Storage, potentially compromising service reliability.
Mitigation Recommendations
Red Hat has released updated resource-agents packages that address these vulnerabilities. Users should apply the security update RHSA-2026:1241 promptly to remediate the issues. Detailed instructions for applying the update are available at https://access.redhat.com/articles/11258. No additional mitigations are specified by the vendor advisory.
Red Hat Security Advisory: resource-agents security update
Description
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The resource-agents packages for Red Hat Enterprise Linux provide scripts for high-availability service managers. This advisory fixes three vulnerabilities in the urllib3 library used by these packages: CVE-2025-66418 (unbounded decompression chain causing resource exhaustion), CVE-2025-66471 (improper handling of highly compressed data in the streaming API), and CVE-2026-21441 (decompression-bomb safeguard bypass when following HTTP redirects in the streaming API). These vulnerabilities could lead to resource exhaustion or bypass of decompression safeguards, potentially affecting system stability and security in high-availability environments. The advisory includes updated resource-agents packages for multiple architectures and variants of Red Hat Enterprise Linux 8.
Potential Impact
The vulnerabilities can cause resource exhaustion due to unbounded decompression chains and improper handling of compressed data, which may lead to denial of service or degraded performance in high-availability systems. Additionally, the decompression-bomb safeguard bypass could allow attackers to circumvent protections designed to prevent resource exhaustion attacks via HTTP redirects. These impacts affect systems running the affected versions of Red Hat Enterprise Linux High Availability and Resilient Storage, potentially compromising service reliability.
Mitigation Recommendations
Red Hat has released updated resource-agents packages that address these vulnerabilities. Users should apply the security update RHSA-2026:1241 promptly to remediate the issues. Detailed instructions for applying the update are available at https://access.redhat.com/articles/11258. No additional mitigations are specified by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:1241
- Cve Count
- 3
- Additional Cves
- ["CVE-2025-66471","CVE-2026-21441"]
Threat ID: 6a160973e29bf47b5063c69e
Added to database: 05/26/2026, 20:58:27 UTC
Last enriched: 08/10/2026, 17:57:18 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 93
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.