Skip to content
OpenAdvisories
Low ELSA-2020-5004 1 CVE

Low: resource-agents security and bug fix update (Oracle Linux 7)

Published Nov 5, 2021 · Updated Nov 5, 2021

Ecosystem: Oracle Linux

Summary

[4.1.1-61.4]
- Upgrade bundled python-httplib2 to fix CVE-2020-11078

Resolves: rhbz#1850992

[4.1.1-61.2]
- azure-lb: fix redirect issue

Resolves: rhbz#1850779

[4.1.1-61.1]
- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

Resolves: rhbz#1846732
Resolves: rhbz#1848673
Resolves: rhbz#1862121

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 resource-agents 0:4.1.1-61.el7_9.4
Oracle Linux · 7 resource-agents-aliyun 0:4.1.1-61.el7_9.4
Oracle Linux · 7 resource-agents-gcp 0:4.1.1-61.el7_9.4

Vulnerabilities 1

  • Medium 6.8
    CVE-2020-11078

    CRLF injection in httplib2

    In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with u…

    httplib2 httplib2 python-httplib2 httplib2 Debian Ubuntu Azure Linux PyPI