Red Hat Security AdvisoryRHSA-2020:5004
resource-agents security and bug fix update
Released 2020-11-10 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server High Availability (v. 7) resource-agents-4.1.1-61.el7_9.4, resource-agents-aliyun-4.1.1-61.el7_9.4, resource-agents-gcp-4.1.1-61.el7_9.4
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) resource-agents-4.1.1-61.el7_9.4, resource-agents-aliyun-4.1.1-61.el7_9.4, resource-agents-gcp-4.1.1-61.el7_9.4
- Red Hat Enterprise Linux for SAP (v. 7) resource-agents-4.1.1-61.el7_9.4, resource-agents-sap-4.1.1-61.el7_9.4, sap-cluster-connector-3.0.1-37.el7_9.4
- Red Hat Enterprise Linux for SAP HANA (v. 7) resource-agents-4.1.1-61.el7_9.4, resource-agents-sap-hana-4.1.1-61.el7_9.4, resource-agents-sap-hana-scaleout-0.164.0-6.el7_9.4
Fixes 1 record
Priority LOW 35
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server.
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.02427 · Published 2020-05-20 · Partial fix · 0.81.0, 0.18.0 CWE-93
