Skip to content
OpenAdvisories
Medium RHSA-2020:4605 1 CVE

Red Hat Security Advisory: resource-agents security and bug fix update

Published Sep 18, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-aliyun 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-aliyun-debuginfo 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-debuginfo 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-debugsource 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-gcp 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-aliyun 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-aliyun-debuginfo 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-debuginfo 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-debugsource 0:4.1.1-68.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-gcp 0:4.1.1-68.el8

Vulnerabilities 1

  • Medium 6.8
    CVE-2020-11078

    CRLF injection in httplib2

    In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with u…

    httplib2 httplib2 python-httplib2 httplib2 Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1759115
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1817432
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1817598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1819021
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1820523
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1830716
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1832321
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1836186
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1843999
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1845574
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1845581
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1845583
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1845937
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1846733
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1850778
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4605.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-11078
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-11078
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-11078
  • article
    https://github.com/httplib2/httplib2/security/advisories/GHSA-gg84-qgv9-w4pq