Summary
The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.
Security Fix(es):
* pacemaker: ACL restrictions bypass (CVE-2020-25654)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | pacemaker | 2.0.4-6.el8_3.1 |
| AlmaLinux · 8 | pacemaker-cli | 2.0.4-6.el8_3.1 |
| AlmaLinux · 8 | pacemaker-cts | 2.0.4-6.el8_3.1 |
| AlmaLinux · 8 | pacemaker-doc | 2.0.4-6.el8_3.1 |
| AlmaLinux · 8 | pacemaker-libs-devel | 2.0.4-6.el8_3.1 |
| AlmaLinux · 8 | pacemaker-nagios-plugins-metadata | 2.0.4-6.el8_3.1 |
| AlmaLinux · 8 | pacemaker-remote | 2.0.4-6.el8_3.1 |
Vulnerabilities 1
-
Unscored —
An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group …
References
-
report
https://vulners.com/cve/CVE-2020-25654