Oval Definition:oval:com.redhat.rhsa:def:20205004
Revision Date:2020-11-10Version:638
Title:RHSA-2020:5004: resource-agents security and bug fix update (Low)
Description:The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.

Security Fix(es):

  • python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request function (CVE-2020-11078)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

  • gcp-vpc-move-vip: An existing alias IP range is removed when a second alias IP range is added (BZ#1846732)

  • sybaseASE: Resource fails to complete a probe operation without access to $sybase_home [RHEL 7] (BZ#1848673)

  • azure-lb: Resource fails intermittently due to nc output redirection to pidfile (BZ#1850779)

  • azure-events: handle exceptions in urlopen (RHEL7) (BZ#1862121)
  • Family:unixClass:patch
    Status:Reference(s):CVE-2020-11078
    RHSA-2020:5004
    Platform(s):Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • resource-agents is earlier than 0:4.1.1-61.el7_9.4
  • AND resource-agents is signed with Red Hat redhatrelease2 key
  • resource-agents-aliyun is earlier than 0:4.1.1-61.el7_9.4
  • AND resource-agents-aliyun is signed with Red Hat redhatrelease2 key
  • resource-agents-gcp is earlier than 0:4.1.1-61.el7_9.4
  • AND resource-agents-gcp is signed with Red Hat redhatrelease2 key
  • resource-agents-sap is earlier than 0:4.1.1-61.el7_9.4
  • AND resource-agents-sap is signed with Red Hat redhatrelease2 key
  • resource-agents-sap-hana is earlier than 0:4.1.1-61.el7_9.4
  • AND resource-agents-sap-hana is signed with Red Hat redhatrelease2 key
  • resource-agents-sap-hana-scaleout is earlier than 0:0.164.0-6.el7_9.4
  • AND resource-agents-sap-hana-scaleout is signed with Red Hat redhatrelease2 key
  • sap-cluster-connector is earlier than 0:3.0.1-37.el7_9.4
  • AND sap-cluster-connector is signed with Red Hat redhatrelease2 key
  • BACK