ELSA-2019-1279

ELSA-2019-1279 - pacemaker security and bug fix update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-07-30

Description

[2.0.1-4.3]
- New build with fixed test in gating.yaml
- Resolves: rhbz#1694557
- Resolves: rhbz#1695247
- Resolves: rhbz#1697264
- Resolves: rhbz#1697265

[2.0.1-4.2]
- New build to apply z-stream tag
- Resolves: rhbz#1694557
- Resolves: rhbz#1695247
- Resolves: rhbz#1697264
- Resolves: rhbz#1697265

[2.0.1-4.1]
- Improve clients' authentication of IPC servers (CVE-2018-16877)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Restore correct behavior when live migration is interrupted
- Resolves: rhbz#1694557
- Resolves: rhbz#1695247
- Resolves: rhbz#1697264
- Resolves: rhbz#1697265

Related CVEs

CVE-2018-16878

CVE-2019-3885

CVE-2018-16877

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	pacemaker-2.0.1-4.el8_0.3.src.rpm	93ad46f12777c207e7cea4a9fe2e7c1b	-
	pacemaker-cluster-libs-2.0.1-4.el8_0.3.aarch64.rpm	638d5f5c85e7774def0df1b6eea9d076	-
	pacemaker-libs-2.0.1-4.el8_0.3.aarch64.rpm	2a162c70eadc426456874ed0ca5c9f4d	-
	pacemaker-schemas-2.0.1-4.el8_0.3.noarch.rpm	099b2503debce67ef0b864009a451529	-
Oracle Linux 8 (x86_64)	pacemaker-2.0.1-4.el8_0.3.src.rpm	93ad46f12777c207e7cea4a9fe2e7c1b	-
	pacemaker-cluster-libs-2.0.1-4.el8_0.3.i686.rpm	9341afed80ae968347104633bebeaac5	-
	pacemaker-cluster-libs-2.0.1-4.el8_0.3.x86_64.rpm	0012906f26b51b689de9d4a1dbe02dde	-
	pacemaker-libs-2.0.1-4.el8_0.3.i686.rpm	990e0b0f8afbbfaa489581e86f84db71	-
	pacemaker-libs-2.0.1-4.el8_0.3.x86_64.rpm	15c13590286ba69fc3551d69b9c30787	-
	pacemaker-schemas-2.0.1-4.el8_0.3.noarch.rpm	099b2503debce67ef0b864009a451529	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team