Summary
[1.1.23-1.0.1]
- Upstream reference in pacemaker crm_report binary [Orabug: 31611300]
[1.1.23-1.1]
- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | pacemaker | 0:1.1.23-1.0.1.el7_9.1 |
| Oracle Linux · 7 | pacemaker-cli | 0:1.1.23-1.0.1.el7_9.1 |
| Oracle Linux · 7 | pacemaker-cluster-libs | 0:1.1.23-1.0.1.el7_9.1 |
| Oracle Linux · 7 | pacemaker-cts | 0:1.1.23-1.0.1.el7_9.1 |
| Oracle Linux · 7 | pacemaker-doc | 0:1.1.23-1.0.1.el7_9.1 |
| Oracle Linux · 7 | pacemaker-libs | 0:1.1.23-1.0.1.el7_9.1 |
| Oracle Linux · 7 | pacemaker-libs-devel | 0:1.1.23-1.0.1.el7_9.1 |
| Oracle Linux · 7 | pacemaker-nagios-plugins-metadata | 0:1.1.23-1.0.1.el7_9.1 |
| Oracle Linux · 7 | pacemaker-remote | 0:1.1.23-1.0.1.el7_9.1 |
Vulnerabilities 1
-
Unscored —
An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group …