Summary
[2.0.1-4.3]
- New build with fixed test in gating.yaml
- Resolves: rhbz#1694557
- Resolves: rhbz#1695247
- Resolves: rhbz#1697264
- Resolves: rhbz#1697265
[2.0.1-4.2]
- New build to apply z-stream tag
- Resolves: rhbz#1694557
- Resolves: rhbz#1695247
- Resolves: rhbz#1697264
- Resolves: rhbz#1697265
[2.0.1-4.1]
- Improve clients' authentication of IPC servers (CVE-2018-16877)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Restore correct behavior when live migration is interrupted
- Resolves: rhbz#1694557
- Resolves: rhbz#1695247
- Resolves: rhbz#1697264
- Resolves: rhbz#1697265
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pacemaker-cluster-libs | 0:2.0.1-4.el8_0.3 |
| Oracle Linux · 8 | pacemaker-libs | 0:2.0.1-4.el8_0.3 |
| Oracle Linux · 8 | pacemaker-schemas | 0:2.0.1-4.el8_0.3 |
Vulnerabilities 3
-
High 8.8
A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.…
-
Medium 6.2
A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of u…
-
Low 3.3
A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive …