Medium ELSA-2020-5487 1 CVE

Moderate: pacemaker security update (Oracle Linux 8)

Published Dec 22, 2020 · Updated Dec 22, 2020

Ecosystem: Oracle Linux

Summary

[2.0.4-6.1]
- Prevent users from bypassing ACLs by using IPC directly (CVE-2020-25654)
- Resolves: rhbz1891528

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	pacemaker-cluster-libs	0:2.0.4-6.el8_3.1
Oracle Linux · 8	pacemaker-libs	0:2.0.4-6.el8_3.1
Oracle Linux · 8	pacemaker-schemas	0:2.0.4-6.el8_3.1

Vulnerabilities 1

Unscored —

CVE-2020-25654

An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group …

pacemaker pacemaker Debian Ubuntu

Nov 24, 2020