Skip to content
OpenAdvisories
Medium RHSA-2020:5004 1 CVE

Red Hat Security Advisory: resource-agents security and bug fix update

Published Sep 18, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server resource-agents 0:4.1.1-61.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server resource-agents-aliyun 0:4.1.1-61.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server resource-agents-debuginfo 0:4.1.1-61.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server resource-agents-gcp 0:4.1.1-61.el7_9.4
Red Hat · RHEL 7 rhel_extras_sap_hana:7 resource-agents 0:4.1.1-61.el7_9.4
Red Hat · RHEL 7 rhel_extras_sap_hana:7 resource-agents-debuginfo 0:4.1.1-61.el7_9.4
Red Hat · RHEL 7 rhel_extras_sap_hana:7 resource-agents-sap-hana 0:4.1.1-61.el7_9.4
Red Hat · RHEL 7 rhel_extras_sap_hana:7 resource-agents-sap-hana-scaleout 0:0.164.0-6.el7_9.4
Red Hat · RHEL 7 rhel_extras_sap:7 resource-agents 0:4.1.1-61.el7_9.4
Red Hat · RHEL 7 rhel_extras_sap:7 resource-agents-debuginfo 0:4.1.1-61.el7_9.4
Red Hat · RHEL 7 rhel_extras_sap:7 resource-agents-sap 0:4.1.1-61.el7_9.4
Red Hat · RHEL 7 rhel_extras_sap:7 sap-cluster-connector 0:3.0.1-37.el7_9.4

Vulnerabilities 1

  • Medium 6.8
    CVE-2020-11078

    CRLF injection in httplib2

    In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with u…

    httplib2 httplib2 python-httplib2 httplib2 Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1845937
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1846732
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1848673
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1850779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1862121
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5004.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-11078
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-11078
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-11078
  • article
    https://github.com/httplib2/httplib2/security/advisories/GHSA-gg84-qgv9-w4pq