Skip to content
OpenAdvisories
Medium SUSE-RU-2018:0821-1 1 CVE

Recommended update for drbd, drbd-utils

Published Mar 26, 2018 · Updated Feb 4, 2026

Summary

This update for drbd and drbd-utils provides the following fixes:

Changes in drbd-utils:

- Make sure the full bitmap gets properly propagated in drbdmeta. Also make sure the ID
is kept when downgrading from v9 to v8. (bsc#1037109)
- Support passing '--force' to drbdadm dump-md. (bsc#1077176)
- Fix a possible kernel trace while starting the initial syncing of a stacked drbd.
(bsc#1058770)
- Backport some fixes of peer_device objects.
- Do not hardcode loglevel local5 and make it possible to change that using --logfacility.
(bsc#1064402)
- Update documentation and examples regarding fencing: it is now moved from the disk to
the net section. (bsc#1061145)
- Skip running drbdadm sh-b-pri in drbd9. (bsc#1061147)
- The included kernel modules in the KMP packages were rebuilt using 'retpoline' support to
mitigate Spectre v2 (bsc#1068032 CVE-2017-5715)

Changes in drbd:

- Make sure the full bitmap gets properly propagated in drbdmeta. (bsc#1037109)

Fixed packages 2

ReleasePackageFixed in
SUSE · SLES 12 SP3 Linux Enterprise High Availability Extension 12 SP3 drbd 9.0.8+git.c8bc3670-3.3.2
SUSE · SLES 12 SP3 Linux Enterprise High Availability Extension 12 SP3 drbd-utils 9.0.0-2.8.1

Vulnerabilities 1

References

  • report
    https://bugzilla.suse.com/1037109
  • report
    https://bugzilla.suse.com/1058770
  • report
    https://bugzilla.suse.com/1061145
  • report
    https://bugzilla.suse.com/1061147
  • report
    https://bugzilla.suse.com/1064402
  • report
    https://bugzilla.suse.com/1068032
  • report
    https://bugzilla.suse.com/1077176
  • web
    https://www.suse.com/security/cve/CVE-2017-5715