ELEA-2020-5529

ELEA-2020-5529 - pacemaker enhancement update

Type:	ENHANCEMENT
Severity:	NA
Release Date:	2020-02-07

Description

clufter
[0.77.1-5]
- Require platform-python-setuptools instead of python3-setuptools
- Resolves: rhbz#1650489

[0.77.1-4]
- fix missing explicit BuildRequires to ensure environment for compiling
C code per the guidelines, and to fix FTBFS: rhbz#1603658
(contributed by Igor Gnatenko )
- fix a thinko in py_byte_compile space-contained argument passing
(https://github.com/rpm-software-management/rpm/issues/222#issuecomment-410026431)
- fix a violation of 'unversioned docdirs' guideline
(https://fedoraproject.org//wiki/Changes/UnversionedDocdirs)
Resolves: rhbz#1638027

[0.77.1-3]
- fix previously omitted unqualified python invocations, drop no longer
needed byte-compilation products through a full grip on such a process,
and also use -I switch to python3 instead of possibly weaker -Es

[0.77.1-2]
- stop creating Python 2 packages by default (nothing in Fedora uses it)
- fix a previously omitted unqualified python invocation

[0.77.1-1]
- drop no longer favoured Group tag
- replace unqualified python invocations with explicit python3
- bump upstream package, see https://pagure.io/clufter/releases

[0.77.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.77.0-2]
- Update Python 2 dependency declarations to new packaging standards
(See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)

[0.77.0-1]
- bump upstream package, see https://pagure.io/clufter/releases

corosync
[3.0.2-3.1]
- Resolves: rhbz#1765619

- totemsrp: Reduce MTU to left room second mcast (rhbz#1765619)
- merge upstream commit ee8b8993d98b3f6af9c058194228fc534fcd0796 (rhbz#1765619)

[3.0.2-3]
- Resolves: rhbz#1738218

- Do not set exec permission for service file
- Fix CFLAGS definition

[3.0.2-2]
- Related: rhbz#1679656

- Improve spausedd test

[3.0.2-1]
- Resolves: rhbz#1705591
- Resolves: rhbz#1688889

kronosnet
[1.10-1.2]
host: Fix defrag buffer reclaim logic that could cause delivery
of corrupted data
Resolves: rhbz#1763714
PMTUd: Fix MTU calculation when using crypto
Disable fun_pmtud_crypto_test as it can take several hours to run
Resolves: rhbz#1763715

[1.10-1.1]
link: Fix memory corruption when too many up/down events are recorded
Resolves: rhbz#1754442

[1.10-1]
Rebase to 1.10 for ACL support
Resolves: rhbz#1688880

pacemaker
[2.0.2-3.2]
- Correct gating test syntax and add z-stream tag to build
- Resolves: rhbz#1764181

[2.0.2-3.1]
- Improve efficiency when closing file descriptors after a fork
- Resolves: rhbz#1764181

[2.0.2-3]
- Make pacemaker-cli require tar and bzip2
- Resolves: rhbz#1741580

[2.0.2-2]
- Synchronize fence-history on fenced-restart
- Cleanup leftover pending-fence-actions when fenced is restarted
- Improve fencing of remote-nodes
- Resolves: rhbz#1708380
- Resolves: rhbz#1708378
- Resolves: rhbz#1721198
- Resolves: rhbz#1695737

[2.0.2-1]
- Add stonith_admin option to display XML output
- Add new crm_rule tool to check date/time rules
- List any constraints cleared by crm_resource --clear
- crm_resource --validate can now get resource parameters from command line
- Rebase on upstream version 2.0.2
- Default concurrent-fencing to true
- Resolves: rhbz#1555939
- Resolves: rhbz#1572116
- Resolves: rhbz#1631752
- Resolves: rhbz#1637020
- Resolves: rhbz#1695737
- Resolves: rhbz#1715426

[2.0.1-5]
- Add gating tests for CI
- Restore correct behavior when live migration is interrupted
- Improve clients authentication of IPC servers (CVE-2018-16877)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Resolves: rhbz#1682116
- Resolves: rhbz#1684306
- Resolves: rhbz#1694558
- Resolves: rhbz#1694560
- Resolves: rhbz#1694908

[2.0.1-4]
- Remove duplicate fence history state listing in crm_mon XML output
- Resolves: rhbz#1667191

[2.0.1-3]
- Fix bundle recovery regression in 2.0.1-2
- Resolves: rhbz#1660592

[2.0.1-2]
- Move pacemaker-doc installed files to /usr/share/doc/pacemaker-doc
to avoid conflict with RHEL 8 location of pacemaker subpackage docs
- Resolves: rhbz#1543494

[2.0.1-1]
- Rebase on upstream commit 0eb799156489376e13fb79dca47ea9160e9d4595 (Pacemaker-2.0.1-rc1)
- Follow upstream change of splitting XML schemas into separate package
- Resolves: rhbz#1543494

pcs
[0.10.2-4.0.2]
- Replace HAM-logo.png with a generic one

[0.10.2-4.0.1]
- Replace HAM-logo.png

[0.10.2-4]
- Generate 256 bytes long corosync authkey so clusters can start when FIPS is enabled
- Resolves: rhbz#1740218

[0.10.2-3]
- Options starting with - and -- are no longer ignored for non-root users
- Resolves: rhbz#1725183

[0.10.2-2]
- Fixed crashes in the pcs host auth command
- Command pcs resource bundle reset no longer accepts the container type
- Fixed id conflict with current bundle configuration in ipcs resource bundle reset
- Resolves: rhbz#1657166 rhbz#1676957

[0.10.2-1]
- Rebased to latest upstream sources (see CHANGELOG.md)
- Added pam as required package
- An alternative webUI rebased to latest upstream sources
- Resolves: rhbz#1673907 rhbz#1679196 rhbz#1714663 rhbz#1717113

resource-agents
[4.1.1-33]
- rabbitmq-cluster: fail monitor when node is in minority partition,
fix stop regression, retry start when cluster join fails, ensure
node attributes are removed

Resolves: rhbz#1745713

[4.1.1-32]
- mysql/galera: use runuser/su to avoid using DAC_OVERRIDE

Resolves: rhbz#1692960

[4.1.1-31]
- podman: add drop-in dependency support

Resolves: rhbz#1736746

[4.1.1-30]
- iSCSITarget/iSCSILogicalUnit: only create iqn/acls when it doesnt
exist

Resolves: rhbz#1692413

[4.1.1-29]
- CTDB: add support for v4.9+

Resolves: rhbz#1732867

[4.1.1-28]
- podman: fixes to avoid bundle resources restarting when probing
takes too long
- LVM-activate: fix monitor to avoid hang caused by validate-all call

Resolves: rhbz#1718219
Resolves: rhbz#1730455

[4.1.1-27]
- ocf_log: do not log debug messages when HA_debug unset
- Filesystem: remove notify-action from metadata
- dhcpd keep SELinux context in chroot

Resolves: rhbz#1707969
Resolves: rhbz#1717759
Resolves: rhbz#1719684

[4.1.1-26]
- sap/sap-hana: split subpackages into separate packages

Resolves: rhbz#1705767

[4.1.1-24]
- Squid: fix PID file issue

Resolves: rhbz#1689184

[4.1.1-23]
- Route: make family parameter optional
- redis: mute password warning

Resolves: rhbz#1669140
Resolves: rhbz#1683548

[4.1.1-22]
- aws-vpc-move-ip: add multi route-table support and fix issue
w/multiple NICs

Resolves: rhbz#1697559

[4.1.1-21]
- gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue

Resolves: rhbz#1695656

[4.1.1-20]
- LVM/clvm: remove manpages for excluded agents
- aws-vpc-move-ip: use '--query' to avoid a possible race condition
- gcloud-ra: fix Python 3 issue and remove Python 2 detection

Resolves: rhbz#1694392
Resolves: rhbz#1693662
Resolves: rhbz#1691456

[4.1.1-19]
- Add CI gating tests
- LVM-activate: support LVs from same VG
- tomcat: use systemd when catalina.sh is unavailable
- Fixed python-devel/perl build dependencies

Resolves: rhbz#1682136
Resolves: rhbz#1667414
Resolves: rhbz#1666691
Resolves: rhbz#1595854

[4.1.1-18]
- aliyun-vpc-move-ip: exclude from main package
- aliyuncli-ra: upgrade bundled python-aliyun-sdk-core and fix Python 3 issues
- ocf.py: byte compile

Resolves: rhbz#1677204
Resolves: rhbz#1677981
Resolves: rhbz#1678874

[4.1.1-17]
- LVM-activate: dont require locking_type

Resolves: rhbz#1658664

[4.1.1-16]
- vdo-vol: fix monitor-action
- LVM-activate: dont fail initial probe

Resolves: rhbz#1662466
Resolves: rhbz#1643307

[4.1.1-15]
- nfsserver: fix start-issues when nfs_shared_infodir parameter is
changed

Resolves: rhbz#1642027

[4.1.1-14]
- redis: use basename in pidof to avoid issues in containers

Resolves: rhbz#1635785

[4.1.1-11]
- Remove grpc from bundle

Resolves: rhbz#1630627

[4.1.1-10]
- systemd-tmpfiles: change path to /run/resource-agents

Resolves: rhbz#1631291

[4.1.1-9]
- podman: new resource agent

Resolves: rhbz#1607607

[4.1.1-8]
- LVM: fix missing dash in activate_options
- LVM-activate: warn about incorrect vg_access_mode
- lvmlockd: add cmirrord support

[4.1.1-7]
- findif: only match lines containing netmasks

[4.1.1-6]
- Rebuild with fixed binutils

[4.1.1-5]
- vdo-vol: new resource agent

Resolves: rhbz#1552330

[4.1.1-4]
- VirtualDomain: add stateless support
- Exclude unsupported agents

[4.1.1-3]
- Added SAPHana and OpenStack agents

[4.1.1-2]
- Remove unsupported clvm and LVM agents

[4.1.1-1]
- Rebase to resource-agents 4.1.1 upstream release.

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	corosync-3.0.2-3.el8_1.1.src.rpm	ed97a10a86236b7c243b5877877bea1a	-
	pacemaker-2.0.2-3.el8_1.2.src.rpm	6d05ef67e77310be62c5193afdd6289a	-
Oracle Linux 8 (x86_64)	clufter-0.77.1-5.el8.src.rpm	103d007fdb2a6c9a1eaa2bfdd6a6e5d9	-
	corosync-3.0.2-3.el8_1.1.src.rpm	ed97a10a86236b7c243b5877877bea1a	-
	kronosnet-1.10-1.el8_1.2.src.rpm	55c57318624165575ae36188960e5db1	-
	pacemaker-2.0.2-3.el8_1.2.src.rpm	6d05ef67e77310be62c5193afdd6289a	-
	pcs-0.10.2-4.0.2.el8.src.rpm	afb895037fcbb00777dc87e0a1c7eb70	-
	resource-agents-4.1.1-33.el8.src.rpm	8b7ffb3b4665c8ca1b7098825a08f5eb	-
	clufter-bin-0.77.1-5.el8.x86_64.rpm	80333bb085f5ae4290b94a8be26db1ec	-
	clufter-common-0.77.1-5.el8.noarch.rpm	db1c3d12b8330f6c80a5e5ff67980ec9	-
	corosync-3.0.2-3.el8_1.1.x86_64.rpm	2fc5964a385367dde57a68e77002b396	-
	libknet1-1.10-1.el8_1.2.i686.rpm	32c30ca6d264e7b09d58db4de28872b4	-
	libknet1-1.10-1.el8_1.2.x86_64.rpm	8e77599e020a189dbc806dc65c9682b8	-
	libknet1-compress-bzip2-plugin-1.10-1.el8_1.2.x86_64.rpm	014655a22312857497843223361d3e42	-
	libknet1-compress-lz4-plugin-1.10-1.el8_1.2.x86_64.rpm	ae01449c4f18a6a1f5d1a73fd9290b21	-
	libknet1-compress-lzma-plugin-1.10-1.el8_1.2.x86_64.rpm	b9204addd7ea8a6bdfb3ccb30a6af98e	-
	libknet1-compress-lzo2-plugin-1.10-1.el8_1.2.x86_64.rpm	47ca73a5350e4f06e9fc5b54f048c34f	-
	libknet1-compress-plugins-all-1.10-1.el8_1.2.x86_64.rpm	816ace2b82cff9f4e48edbf0c460b03f	-
	libknet1-compress-zlib-plugin-1.10-1.el8_1.2.x86_64.rpm	8f26d3d9d11bdcdefb4cba7009eeccf9	-
	libknet1-crypto-nss-plugin-1.10-1.el8_1.2.x86_64.rpm	e02cd4424204d0cbc7843efbd1a855e6	-
	libknet1-crypto-openssl-plugin-1.10-1.el8_1.2.x86_64.rpm	a51cc19b79f29c3a977a9ae6524bb4b3	-
	libknet1-crypto-plugins-all-1.10-1.el8_1.2.x86_64.rpm	cc40973825a6a5470b46c083e0d9effb	-
	libknet1-devel-1.10-1.el8_1.2.i686.rpm	36245deb43334dbe22ac5977246fb9e3	-
	libknet1-devel-1.10-1.el8_1.2.x86_64.rpm	e88398902c097ed7aa0087827eb81976	-
	libknet1-plugins-all-1.10-1.el8_1.2.x86_64.rpm	f55237f4cd12d1bb0866605165a44afc	-
	libnozzle1-1.10-1.el8_1.2.x86_64.rpm	348eac3a9871705ad168bfc5d88d08f8	-
	pacemaker-2.0.2-3.el8_1.2.x86_64.rpm	a872374b42547308a809155b50dbbb0d	-
	pacemaker-cli-2.0.2-3.el8_1.2.x86_64.rpm	fbad5fb965da416bf0bffafee34fc1d7	-
	pcs-0.10.2-4.0.2.el8.x86_64.rpm	f1350519719822da50bfdc24dd111c78	-
	python3-clufter-0.77.1-5.el8.noarch.rpm	c41762df5dc3928d29c943c4dcb480b3	-
	resource-agents-4.1.1-33.el8.x86_64.rpm	8167993506bc0eb757567da55896b753	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team