Red Hat Security AdvisoryRHSA-2019:1279
pacemaker security and bug fix update
Released 2019-05-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) pacemaker-2.0.1-4.el8_0.3, pacemaker-cluster-libs-2.0.1-4.el8_0.3, pacemaker-libs-2.0.1-4.el8_0.3 +1
- Red Hat Enterprise Linux High Availability (v. 8) pacemaker-2.0.1-4.el8_0.3, pacemaker-cli-2.0.1-4.el8_0.3, pacemaker-cts-2.0.1-4.el8_0.3 +4
- Red Hat Enterprise Linux Resilient Storage (v. 8) pacemaker-2.0.1-4.el8_0.3, pacemaker-cli-2.0.1-4.el8_0.3, pacemaker-cts-2.0.1-4.el8_0.3 +4
Fixes 3 records
Priority LOW 37
A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01901 · Published 2019-04-18 · Partial fix CWE-416
Priority LOW 34
A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00379 · Published 2019-04-18 · Partial fix CWE-287
Priority LOW 25
A flaw was found in pacemaker up to and including version 2.0.1.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00411 · Published 2019-04-18 · Partial fix CWE-400
