ELBA-2020-6021

ELBA-2020-6021 - pacemaker bug fix update

Type:	BUG
Severity:	NA
Release Date:	2020-12-22

Description

[2.0.4-6.1]
- Prevent users from bypassing ACLs by using IPC directly (CVE-2020-25654)
- Resolves: rhbz1891528

[2.0.4-6]
- Fix cibsecret bug when node name is different from hostname
- Resolves: rhbz1870873

[2.0.4-5]
- Synchronize start-up and shutdown with SBD
- Resolves: rhbz1718324

[2.0.4-4]
- Allow crm_node -l/-p options to work from Pacemaker Remote nodes
- Correct action timeout value listed in log message
- Fix regression in crm_mon --daemonize with HTML output
- Resolves: rhbz1796824
- Resolves: rhbz1856035
- Resolves: rhbz1857728

[2.0.4-3]
- Allow resource and operation defaults per resource or operation type
- Rebase on upstream 2.0.4 final release
- Support on-fail='demote' and no-quorum-policy='demote' options
- Remove incorrect comment from sysconfig file
- Resolves: rhbz1628701
- Resolves: rhbz1828488
- Resolves: rhbz1837747
- Resolves: rhbz1848789

[2.0.4-2]
- Improve cibsecret help and clean up code per static analysis
- Resolves: rhbz1793860

[2.0.4-1]
- Clear leaving node's attributes if there is no DC
- Add crm_mon --node option to limit display to particular node or tagged nodes
- Add crm_mon --include/--exclude options to select what sections are shown
- priority-fencing-delay option bases delay on where resources are active
- Pending DC fencing gets 'stuck' in status display
- crm_rule can now check rule expiration when 'years' is specified
- crm_mon now formats error messages better
- Support for CIB secrets is enabled
- Rebase on latest upstream Pacemaker release
- Fix regression introduced in 8.2 so crm_node -n works on remote nodes
- Avoid infinite loop when topology is removed while unfencing is in progress
- Resolves: rhbz1300604
- Resolves: rhbz1363907
- Resolves: rhbz1784601
- Resolves: rhbz1787751
- Resolves: rhbz1790591
- Resolves: rhbz1793653
- Resolves: rhbz1793860
- Resolves: rhbz1828488
- Resolves: rhbz1830535
- Resolves: rhbz1831775

[2.0.3-5]
- Clear leaving node's attributes if there is no DC
- Resolves: rhbz1791841

[2.0.3-4]
- Implement shutdown-lock feature
- Resolves: rhbz1712584

[2.0.3-3]
- Rebase on Pacemaker-2.0.3 final release
- Resolves: rhbz1752538

[2.0.3-2]
- Rebase on Pacemaker-2.0.3-rc3
- Resolves: rhbz1752538

[2.0.3-1]
- Rebase on Pacemaker-2.0.3-rc2
- Parse crm_mon --fence-history option correctly
- Put timeout on controller waiting for scheduler response
- Offer Pacemaker Remote option for bind address
- Calculate cluster recheck interval dynamically
- Clarify crm_resource help text
- Reduce system calls after forking a child process
- Resolves: rhbz1699978
- Resolves: rhbz1725236
- Resolves: rhbz1743377
- Resolves: rhbz1747553
- Resolves: rhbz1748805
- Resolves: rhbz1752538
- Resolves: rhbz1762025

[2.0.2-3]
- Make pacemaker-cli require tar and bzip2
- Resolves: rhbz#1741580

[2.0.2-2]
- Synchronize fence-history on fenced-restart
- Cleanup leftover pending-fence-actions when fenced is restarted
- Improve fencing of remote-nodes
- Resolves: rhbz#1708380
- Resolves: rhbz#1708378
- Resolves: rhbz#1721198
- Resolves: rhbz#1695737

[2.0.2-1]
- Add stonith_admin option to display XML output
- Add new crm_rule tool to check date/time rules
- List any constraints cleared by crm_resource --clear
- crm_resource --validate can now get resource parameters from command line
- Rebase on upstream version 2.0.2
- Default concurrent-fencing to true
- Resolves: rhbz#1555939
- Resolves: rhbz#1572116
- Resolves: rhbz#1631752

Updated Packages

Release/Architecture

Filename

MD5sum

Superseded By Advisory

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team