Red Hat Security AdvisoryRHSA-2019:1278
pacemaker security update
Released 2019-05-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server High Availability (v. 7) pacemaker-1.1.19-8.el7_6.5, pacemaker-cli-1.1.19-8.el7_6.5, pacemaker-cluster-libs-1.1.19-8.el7_6.5 +6
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) pacemaker-1.1.19-8.el7_6.5, pacemaker-cli-1.1.19-8.el7_6.5, pacemaker-cluster-libs-1.1.19-8.el7_6.5 +6
Fixes 3 records
Priority LOW 37
A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01901 · Published 2019-04-18 · Partial fix CWE-416
Priority LOW 34
A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00379 · Published 2019-04-18 · Partial fix CWE-287
Priority LOW 25
A flaw was found in pacemaker up to and including version 2.0.1.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00411 · Published 2019-04-18 · Partial fix CWE-400
