Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2020-5947

Опубликовано: 24 нояб. 2020
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2020-5947: resource-agents security update (IMPORTANT)

[4.1.1-68]

  • azure-lb: fix redirect issue

    Resolves: rhbz#1850778

[4.1.1-67]

  • gcp-vpc-move-vip: add support for multiple alias IPs

    Resolves: rhbz#1846733

[4.1.1-65]

  • azure-events: handle exceptions in urlopen

    Resolves: rhbz#1845574

[4.1.1-64]

  • nfsserver: fix NFSv4-only support

  • azure-events: new resource agent for Azure

    Resolves: rhbz#1818997 Resolves: rhbz#1819965

[4.1.1-60]

  • Upgrade bundled python-httplib2 to fix CVE-2020-11078

    Resolves: rhbz#1850990

[4.1.1-59]

  • pgsql: support Pacemaker v2.03+ output

    Resolves: rhbz#1836186

[4.1.1-56]

  • Filesystem: set 'fast_stop' default to 'no' for GFS2 filesystems

    Resolves: rhbz#1814896

[4.1.1-55]

  • nfsserver: dont log error message when /etc/sysconfig/nfs does not exist

  • exportfs: describe clientspec format in metadata

    Resolves: rhbz#1845581 Resolves: rhbz#1845583

[4.1.1-54]

  • exportfs: add symlink support

  • aliyun-vpc-move-ip: log output when failing

    Resolves: rhbz#1820523 Resolves: rhbz#1843999

[4.1.1-53]

  • podman: force remove container if remove fails

    Resolves: rhbz#1839721

[4.1.1-52]

  • gcp-pd-move: new resource agent for Google Cloud

    Resolves: rhbz#1633251

[4.1.1-51]

  • NovaEvacuate: suppress expected initial error message

  • db2 (HADR): promote standby node when master node disappears

    Resolves: rhbz#1830716 Resolves: rhbz#1836945

[4.1.1-50]

  • rabbitmq-cluster: increase rabbitmqctl wait timeout during start

    Resolves: rhbz#1832321

[4.1.1-49]

  • aws-vpc-route53: new resource agent for AWS

  • pgsql: improve checks to prevent incorrect status, and set initial score for primary and hot standby

    Resolves: rhbz#1759115 Resolves: rhbz#1744190

[4.1.1-47]

  • aws-vpc-move-ip: delete remaining route entries

    Resolves: rhbz#1819021

[4.1.1-46]

  • use safe temp file location

  • ocf-shellfuncs: ocf_is_clone(): fix to return true when clone-max is set to 0

    Resolves: rhbz#1817432 Resolves: rhbz#1817598

[4.1.1-45]

  • azure-lb: support using socat instead of nc

  • aws-vpc-move-ip: add 'routing_table_role' parameter

  • redis: fix validate-all action and run it during start

    Resolves: rhbz#1804658 Resolves: rhbz#1810466 Resolves: rhbz#1792237

[4.1.1-44]

  • lvmlockd: automatically remove locking_type from lvm.conf for LVM v2.03+

    Resolves: rhbz#1808468

[4.1.1-43]

  • rabbitmq-cluster: delete nodename when stop fails

    Resolves: rhbz#1792196

[4.1.1-42]

  • IPsrcaddr: add destination and table parameters

    Resolves: rhbz#1744224

[4.1.1-40]

  • podman: improve image exist check

  • IPaddr2: add CLUSTERIP not supported info to metadata/manpage

  • Filesystem: refresh UUID if block device doesnt exist

    Resolves: rhbz#1788889 Resolves: rhbz#1767916 Resolves: rhbz#1777381

[4.1.1-38]

  • IPaddr2: add noprefixroute parameter

    Resolves: rhbz#1741042

[4.1.1-36]

  • exportfs: allow multiple exports with same fsid

  • mysql/galera: fix incorrect rc

    Resolves: rhbz#1764888 Resolves: rhbz#1765128

[4.1.1-35]

  • Route: dont fence when parameters not set

  • LVM-activate: add partial-activation support

    Resolves: rhbz#1750261 Resolves: rhbz#1741843

[4.1.1-34]

  • LVM/clvm: remove manpages for excluded agents

  • LVM-activate: return NOT_RUNNING when node rejoins cluster

  • LVM-activate: detect systemid volume without reboot

  • Filesystem: add symlink support

  • Filesystem: avoid corrupt mount-list and dont kill incorrect processes for bind-mounts

  • IPsrcaddr: make proto optional to fix regression when used without NetworkManager

  • docker: fix stop issues

  • rabbitmq-cluster: also restore users in single node mode

  • IPaddr2: sanitize compressed IPv6 IPs

  • nfsserver: systemd performance improvements

  • NovaEvacuate: add 'evacuate_delay' parameter

    Resolves: rhbz#1694392 Resolves: rhbz#1695039 Resolves: rhbz#1738428 Resolves: rhbz#1744103 Resolves: rhbz#1744140 Resolves: rhbz#1757837 Resolves: rhbz#1748768 Resolves: rhbz#1750352 Resolves: rhbz#1751700 Resolves: rhbz#1751962 Resolves: rhbz#1755760

[4.1.1-33]

  • rabbitmq-cluster: fail monitor when node is in minority partition, fix stop regression, retry start when cluster join fails, ensure node attributes are removed

    Resolves: rhbz#1745713

[4.1.1-32]

  • mysql/galera: use runuser/su to avoid using DAC_OVERRIDE

    Resolves: rhbz#1692960

[4.1.1-31]

  • podman: add drop-in dependency support

    Resolves: rhbz#1736746

[4.1.1-30]

  • iSCSITarget/iSCSILogicalUnit: only create iqn/acls when it doesnt exist

    Resolves: rhbz#1692413

[4.1.1-29]

  • CTDB: add support for v4.9+

    Resolves: rhbz#1732867

[4.1.1-28]

  • podman: fixes to avoid bundle resources restarting when probing takes too long

  • LVM-activate: fix monitor to avoid hang caused by validate-all call

    Resolves: rhbz#1718219 Resolves: rhbz#1730455

[4.1.1-27]

  • ocf_log: do not log debug messages when HA_debug unset

  • Filesystem: remove notify-action from metadata

  • dhcpd keep SELinux context in chroot

    Resolves: rhbz#1707969 Resolves: rhbz#1717759 Resolves: rhbz#1719684

[4.1.1-26]

  • sap/sap-hana: split subpackages into separate packages

    Resolves: rhbz#1705767

[4.1.1-24]

  • Squid: fix PID file issue

    Resolves: rhbz#1689184

[4.1.1-23]

  • Route: make family parameter optional

  • redis: mute password warning

    Resolves: rhbz#1669140 Resolves: rhbz#1683548

[4.1.1-22]

  • aws-vpc-move-ip: add multi route-table support and fix issue w/multiple NICs

    Resolves: rhbz#1697559

[4.1.1-21]

  • gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue

    Resolves: rhbz#1695656

[4.1.1-20]

  • aws-vpc-move-ip: use '--query' to avoid a possible race condition

  • gcloud-ra: fix Python 3 issue and remove Python 2 detection

    Resolves: rhbz#1693662 Resolves: rhbz#1691456

[4.1.1-19]

  • Add CI gating tests

  • LVM-activate: support LVs from same VG

  • tomcat: use systemd when catalina.sh is unavailable

  • Fixed python-devel/perl build dependencies

    Resolves: rhbz#1682136 Resolves: rhbz#1667414 Resolves: rhbz#1666691 Resolves: rhbz#1595854

[4.1.1-18]

  • aliyun-vpc-move-ip: exclude from main package

  • aliyuncli-ra: upgrade bundled python-aliyun-sdk-core and fix Python 3 issues

  • ocf.py: byte compile

    Resolves: rhbz#1677204 Resolves: rhbz#1677981 Resolves: rhbz#1678874

[4.1.1-17]

  • LVM-activate: dont require locking_type

    Resolves: rhbz#1658664

[4.1.1-16]

  • vdo-vol: fix monitor-action

  • LVM-activate: dont fail initial probe

    Resolves: rhbz#1662466 Resolves: rhbz#1643307

[4.1.1-15]

  • nfsserver: fix start-issues when nfs_shared_infodir parameter is changed

    Resolves: rhbz#1642027

[4.1.1-14]

  • redis: use basename in pidof to avoid issues in containers

    Resolves: rhbz#1635785

[4.1.1-11]

  • Remove grpc from bundle

    Resolves: rhbz#1630627

[4.1.1-10]

  • systemd-tmpfiles: change path to /run/resource-agents

    Resolves: rhbz#1631291

[4.1.1-9]

  • podman: new resource agent

    Resolves: rhbz#1607607

[4.1.1-8]

  • LVM: fix missing dash in activate_options
  • LVM-activate: warn about incorrect vg_access_mode
  • lvmlockd: add cmirrord support

[4.1.1-7]

  • findif: only match lines containing netmasks

[4.1.1-6]

  • Rebuild with fixed binutils

[4.1.1-5]

  • vdo-vol: new resource agent

    Resolves: rhbz#1552330

[4.1.1-4]

  • VirtualDomain: add stateless support
  • Exclude unsupported agents

[4.1.1-3]

  • Added SAPHana and OpenStack agents

[4.1.1-2]

  • Remove unsupported clvm and LVM agents

[4.1.1-1]

  • Rebase to resource-agents 4.1.1 upstream release.

[4.1.0-2]

  • Add gcc to BuildRequires

[4.1.0-1.1]

  • Escape macros in %changelog

[4.1.0-1]

  • Rebase to resource-agents 4.1.0 upstream release.

[4.0.1-1.3]

[4.0.1-1.2]

[4.0.1-1.1]

[4.0.1-1]

  • Rebase to resource-agents 4.0.1 upstream release.

[4.0.0-2]

  • galera: remove 'long SST monitoring' support due to corner-case issues

[4.0.0-1]

  • Rebase to resource-agents 4.0.0 upstream release.

[3.9.7-6]

  • Add netstat dependency

[3.9.7-4]

  • Rebase to resource-agents 3.9.7 upstream release.

[3.9.6-2.2]

[3.9.6-2.1]

[3.9.6-2]

  • Rebase to latest upstream code in order to pull in rabbitmq-cluster agent

[3.9.6-1]

  • Rebase to resource-agents 3.9.6 upstream release.

[3.9.5-12.2]

[3.9.5-12.1]

[3.9.5-12]

  • Sync with latest upstream.

[3.9.5-11]

  • Sync with latest upstream.

[3.9.5-10]

  • Fix build system for rawhide.

[3.9.5-9]

  • Remove rgmanager agents from build.

[3.9.5-8]

[3.9.5-7]

  • Perl 5.18 rebuild

[3.9.5-6]

  • Restores rsctmp directory to upstream default.

[3.9.5-5]

  • Merges redhat provider into heartbeat provider. Remove rgmanager's redhat provider.

    Resolves: rhbz#917681 Resolves: rhbz#928890 Resolves: rhbz#952716 Resolves: rhbz#960555

[3.9.5-3]

  • Fixes build system error with conditional logic involving IPv6addr and updates spec file to build against rhel 7 as well as fedora 19.

[3.9.5-2]

Обновленные пакеты

Oracle Linux 8

Oracle Linux x86_64

resource-agents

4.1.1-68.el8

Связанные CVE

Связанные уязвимости

CVSS3: 6.8
ubuntu
больше 5 лет назад

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0.

CVSS3: 6.8
redhat
больше 5 лет назад

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0.

CVSS3: 6.8
nvd
больше 5 лет назад

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0.

CVSS3: 6.8
debian
больше 5 лет назад

In httplib2 before version 0.18.0, an attacker controlling unescaped p ...

CVSS3: 6.8
github
больше 5 лет назад

CRLF injection in httplib2