- Issued:
- 2020-11-10
- Updated:
- 2020-11-10
RHSA-2020:5003 - Low: fence-agents security and bug fix update
Synopsis
Low: fence-agents security and bug fix update
Type/Severity
Security Advisory Low
Topic
An update for fence-agents is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
- python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request function (CVE-2020-11078)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
-
fence_lpar: Long username, HMC hostname, or managed system name causes failures [RHEL 7] (BZ#1860545)
-
InstanceHA does not evacuate instances created with private flavor in tenant project (RHEL7) (BZ#1862024)
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat Enterprise Linux for Scientific Computing | 7 | x86_64 |
| Red Hat Enterprise Linux for Power, little endian | 7 | ppc64le |
| Red Hat Enterprise Linux for Power, big endian | 7 | ppc64 |
| Red Hat Enterprise Linux for IBM z Systems | 7 | s390x |
| Red Hat Enterprise Linux Workstation | 7 | x86_64 |
| Red Hat Enterprise Linux Server | 7 | x86_64 |
| Red Hat Enterprise Linux Server - Extended Life Cycle Support | 7 | x86_64 |
| Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian | 7 | ppc64le |
| Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian | 7 | ppc64 |
| Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) | 7 | s390x |
| Red Hat Enterprise Linux Resilient Storage for x86_64 | 7 | x86_64 |
| Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle Support | 7 | x86_64 |
| Red Hat Enterprise Linux High Availability for x86_64 | 7 | x86_64 |
| Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Support | 7 | x86_64 |
Updated Packages
- fence-agents-4.2.1-41.el7_9.2.src.rpm
- fence-agents-common-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-rsa-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-ipmilan-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-vmware-soap-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-cisco-mds-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-sbd-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-vmware-rest-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-brocade-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-bladecenter-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-amt-ws-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-amt-ws-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-heuristics-ping-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-compute-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-rhevm-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-ilo2-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-common-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-aliyun-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-eaton-snmp-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-sbd-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-vmware-soap-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-mpath-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-heuristics-ping-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-ipdu-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-rsb-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-emerson-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-eaton-snmp-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-vmware-rest-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-emerson-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-cisco-ucs-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-brocade-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-lpar-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-eps-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-ifmib-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-ilo2-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-scsi-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-apc-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-intelmodular-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-apc-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-ilo-moonshot-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-ifmib-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-ipmilan-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-ilo-ssh-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-ipmilan-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-kdump-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-ibmblade-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-mpath-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-ifmib-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-wti-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-debuginfo-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-apc-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-intelmodular-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-apc-snmp-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-brocade-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-all-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-ilo-moonshot-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-brocade-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-ipdu-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-redfish-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-debuginfo-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-eps-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-amt-ws-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-apc-snmp-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-kdump-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-drac5-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-hpblade-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-mpath-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-zvm-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-ilo-mp-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-aws-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-compute-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-emerson-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-scsi-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-bladecenter-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-ibmblade-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-wti-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-hpblade-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-intelmodular-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-lpar-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-all-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-eaton-snmp-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-rhevm-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-ilo-ssh-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-rsb-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-amt-ws-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-compute-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-drac5-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-rsa-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-ilo-mp-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-ilo-moonshot-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-cisco-mds-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-sbd-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-lpar-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-all-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-vmware-rest-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-cisco-mds-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-ifmib-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-cisco-mds-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-ibmblade-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-ilo-ssh-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-eaton-snmp-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-ilo-moonshot-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-azure-arm-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-ilo2-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-kdump-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-hpblade-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-sbd-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-all-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-scsi-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-scsi-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-common-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-virsh-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-virsh-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-wti-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-emerson-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-ilo-mp-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-ilo2-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-bladecenter-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-ilo-ssh-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-virsh-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-apc-snmp-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-drac5-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-heuristics-ping-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-gce-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-rsb-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-virsh-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-vmware-soap-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-cisco-ucs-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-drac5-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-redfish-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-cisco-ucs-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-ipmilan-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-eps-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-ipdu-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-redfish-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-compute-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-kdump-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-rhevm-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-heuristics-ping-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-rsa-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-cisco-ucs-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-rhevm-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-common-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-ibmblade-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-rsa-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-debuginfo-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-intelmodular-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-ilo-mp-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-vmware-rest-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-rsb-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-apc-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-bladecenter-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-ipdu-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-mpath-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-vmware-soap-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-wti-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-apc-snmp-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-hpblade-4.2.1-41.el7_9.2.s390x.rpm
- fence-agents-redfish-4.2.1-41.el7_9.2.ppc64le.rpm
- fence-agents-debuginfo-4.2.1-41.el7_9.2.ppc64.rpm
- fence-agents-lpar-4.2.1-41.el7_9.2.x86_64.rpm
- fence-agents-eps-4.2.1-41.el7_9.2.ppc64le.rpm
Fixes
- This content is not included.BZ - 1845937
- This content is not included.BZ - 1860545
- This content is not included.BZ - 1862024
CVEs
References
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.