Red Hat Security AdvisoryRHSA-2020:5003
fence-agents security and bug fix update
Released 2020-11-10 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) fence-agents-lpar-4.2.1-41.el7_9.2, fence-agents-virsh-4.2.1-41.el7_9.2
- Red Hat Enterprise Linux Server (v. 7) fence-agents-4.2.1-41.el7_9.2, fence-agents-all-4.2.1-41.el7_9.2, fence-agents-amt-ws-4.2.1-41.el7_9.2 +36
- Red Hat Enterprise Linux Server High Availability (v. 7) fence-agents-aliyun-4.2.1-41.el7_9.2, fence-agents-aws-4.2.1-41.el7_9.2, fence-agents-azure-arm-4.2.1-41.el7_9.2 +1
- Red Hat Enterprise Linux Server Optional (v. 7) fence-agents-lpar-4.2.1-41.el7_9.2, fence-agents-virsh-4.2.1-41.el7_9.2
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) fence-agents-aliyun-4.2.1-41.el7_9.2, fence-agents-aws-4.2.1-41.el7_9.2, fence-agents-azure-arm-4.2.1-41.el7_9.2 +1
- Red Hat Enterprise Linux Workstation (v. 7) fence-agents-4.2.1-41.el7_9.2, fence-agents-all-4.2.1-41.el7_9.2, fence-agents-amt-ws-4.2.1-41.el7_9.2 +34
- Red Hat Enterprise Linux Workstation Optional (v. 7) fence-agents-lpar-4.2.1-41.el7_9.2, fence-agents-virsh-4.2.1-41.el7_9.2
Fixes 1 record
Priority LOW 35
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server.
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.02427 · Published 2020-05-20 · Partial fix · 0.81.0, 0.18.0 CWE-93
