ELBA-2020-6021

ELBA-2020-6021 - pacemaker bug fix update

Type:BUG
Severity:NA
Release Date:2020-12-22

Description


[2.0.4-6.1]
- Prevent users from bypassing ACLs by using IPC directly (CVE-2020-25654)
- Resolves: rhbz1891528

[2.0.4-6]
- Fix cibsecret bug when node name is different from hostname
- Resolves: rhbz1870873

[2.0.4-5]
- Synchronize start-up and shutdown with SBD
- Resolves: rhbz1718324

[2.0.4-4]
- Allow crm_node -l/-p options to work from Pacemaker Remote nodes
- Correct action timeout value listed in log message
- Fix regression in crm_mon --daemonize with HTML output
- Resolves: rhbz1796824
- Resolves: rhbz1856035
- Resolves: rhbz1857728

[2.0.4-3]
- Allow resource and operation defaults per resource or operation type
- Rebase on upstream 2.0.4 final release
- Support on-fail='demote' and no-quorum-policy='demote' options
- Remove incorrect comment from sysconfig file
- Resolves: rhbz1628701
- Resolves: rhbz1828488
- Resolves: rhbz1837747
- Resolves: rhbz1848789

[2.0.4-2]
- Improve cibsecret help and clean up code per static analysis
- Resolves: rhbz1793860

[2.0.4-1]
- Clear leaving node's attributes if there is no DC
- Add crm_mon --node option to limit display to particular node or tagged nodes
- Add crm_mon --include/--exclude options to select what sections are shown
- priority-fencing-delay option bases delay on where resources are active
- Pending DC fencing gets 'stuck' in status display
- crm_rule can now check rule expiration when 'years' is specified
- crm_mon now formats error messages better
- Support for CIB secrets is enabled
- Rebase on latest upstream Pacemaker release
- Fix regression introduced in 8.2 so crm_node -n works on remote nodes
- Avoid infinite loop when topology is removed while unfencing is in progress
- Resolves: rhbz1300604
- Resolves: rhbz1363907
- Resolves: rhbz1784601
- Resolves: rhbz1787751
- Resolves: rhbz1790591
- Resolves: rhbz1793653
- Resolves: rhbz1793860
- Resolves: rhbz1828488
- Resolves: rhbz1830535
- Resolves: rhbz1831775

[2.0.3-5]
- Clear leaving node's attributes if there is no DC
- Resolves: rhbz1791841

[2.0.3-4]
- Implement shutdown-lock feature
- Resolves: rhbz1712584

[2.0.3-3]
- Rebase on Pacemaker-2.0.3 final release
- Resolves: rhbz1752538

[2.0.3-2]
- Rebase on Pacemaker-2.0.3-rc3
- Resolves: rhbz1752538

[2.0.3-1]
- Rebase on Pacemaker-2.0.3-rc2
- Parse crm_mon --fence-history option correctly
- Put timeout on controller waiting for scheduler response
- Offer Pacemaker Remote option for bind address
- Calculate cluster recheck interval dynamically
- Clarify crm_resource help text
- Reduce system calls after forking a child process
- Resolves: rhbz1699978
- Resolves: rhbz1725236
- Resolves: rhbz1743377
- Resolves: rhbz1747553
- Resolves: rhbz1748805
- Resolves: rhbz1752538
- Resolves: rhbz1762025

[2.0.2-3]
- Make pacemaker-cli require tar and bzip2
- Resolves: rhbz#1741580

[2.0.2-2]
- Synchronize fence-history on fenced-restart
- Cleanup leftover pending-fence-actions when fenced is restarted
- Improve fencing of remote-nodes
- Resolves: rhbz#1708380
- Resolves: rhbz#1708378
- Resolves: rhbz#1721198
- Resolves: rhbz#1695737

[2.0.2-1]
- Add stonith_admin option to display XML output
- Add new crm_rule tool to check date/time rules
- List any constraints cleared by crm_resource --clear
- crm_resource --validate can now get resource parameters from command line
- Rebase on upstream version 2.0.2
- Default concurrent-fencing to true
- Resolves: rhbz#1555939
- Resolves: rhbz#1572116
- Resolves: rhbz#1631752




Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 8 (aarch64) pacemaker-2.0.4-6.el8_3.1.src.rpmeccfb5a3ba9ea3ef90f116dc3f320f56-
Oracle Linux 8 (x86_64) pacemaker-2.0.4-6.el8_3.1.src.rpmeccfb5a3ba9ea3ef90f116dc3f320f56-
pacemaker-2.0.4-6.el8_3.1.x86_64.rpmc1b58c4c304dfbe94e4fa7001fe04c98-
pacemaker-cli-2.0.4-6.el8_3.1.x86_64.rpm5e6c5c2c6b6a1c5de6cc561a813abb26-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete