Skip to content
OpenAdvisories
Low ELSA-2020-5003 1 CVE

Low: fence-agents security and bug fix update (Oracle Linux 7)

Published Nov 13, 2020 · Updated Nov 13, 2020

Ecosystem: Oracle Linux

Summary

[4.2.1-41.2]
- Upgrade bundled python-httplib2 to fix CVE-2020-11078
Resolves: rhbz#1850114

[4.2.1-41.1]
- fence_lpar: fix issue with long username, hostname, etc not
working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

Resolves: rhbz#1860545
Resolves: rhbz#1862024

Fixed packages 38

ReleasePackageFixed in
Oracle Linux · 7 fence-agents-all 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-amt-ws 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-apc 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-apc-snmp 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-bladecenter 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-brocade 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-cisco-mds 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-cisco-ucs 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-common 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-compute 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-drac5 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-eaton-snmp 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-emerson 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-eps 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-heuristics-ping 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-hpblade 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-ibmblade 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-ifmib 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-ilo-moonshot 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-ilo-mp 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-ilo-ssh 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-ilo2 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-intelmodular 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-ipdu 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-ipmilan 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-kdump 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-lpar 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-mpath 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-redfish 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-rhevm 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-rsa 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-rsb 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-sbd 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-scsi 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-virsh 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-vmware-rest 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-vmware-soap 0:4.2.1-41.el7_9.2
Oracle Linux · 7 fence-agents-wti 0:4.2.1-41.el7_9.2

Vulnerabilities 1

  • Medium 6.8
    CVE-2020-11078

    CRLF injection in httplib2

    In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with u…

    httplib2 httplib2 python-httplib2 httplib2 Debian Ubuntu Azure Linux PyPI