Important: pacemaker security update (Amazon Linux 2)

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-3885: A use-after-free flaw was found in pacemaker which could result in certain sensitive information to be leaked via the system logs. 1694554: CVE-2019-3885 pacemaker: Information disclosure through use-after-free CVE-2018-16878: A flaw was found in pacemaker. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS. 1657962: CVE-2018-16878 pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS CVE-2018-16877: A flaw was found in the way pacemaker's client-server authentication was implemented. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation. 1652646: CVE-2018-16877 pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc