Login
Newsletter
Werbung

Sicherheit: Mangelnde Rechteprüfung in pacemaker
Aktuelle Meldungen Distributionen
Name: Mangelnde Rechteprüfung in pacemaker
ID: FEDORA-2020-3d0e38b9e7
Distribution: Fedora
Plattformen: Fedora 33
Datum: Fr, 27. November 2020, 07:58
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25654
https://bugzilla.redhat.com/show_bug.cgi?id=1898409
https://bugzilla.redhat.com/show_bug.cgi?id=1889581
Applikationen: Pacemaker

Originalnachricht

-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2020-3d0e38b9e7
2020-11-27 01:20:50.553150
-------------------------------------------------------------------------------
-

Name : pacemaker
Product : Fedora 33
Version : 2.0.5
Release : 0.7.rc3.fc33
URL : https://www.clusterlabs.org
Summary : Scalable High-Availability cluster resource manager
Description :
Pacemaker is an advanced, scalable High-Availability cluster resource
manager.

It supports more than 16 node clusters with significant capabilities
for managing resources and dependencies.

It will run scripts at initialization, when machines go up or down,
when related resources fail and can be configured to periodically check
resource health.

Available rpmbuild rebuild options:
--with(out) : cibsecrets coverage doc hardening pre_release profiling

-------------------------------------------------------------------------------
-
Update Information:

** Wed Nov 18 2020 Klaus Wenninger <kwenning@redhat.com> - 2.0.5-0.7.rc3
** - a
little more syncing with upstream spec-file ** Tue Nov 17 2020 Klaus Wenninger
<kwenning@redhat.com> - 2.0.5-0.6.rc3 ** - Update for new upstream
tarball for
release candidate: Pacemaker-2.0.5-rc3 for full details, see included
ChangeLog file or
https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.0.5-rc3 -
Corosync in Fedora now provides corosync-devel as well in isa-flavor ** Sun
Nov
1 2020 Klaus Wenninger <kwenning@redhat.com> - 2.0.5-0.5.rc2 ** - Update
for
new upstream tarball for release candidate: Pacemaker-2.0.5-rc2, includes fix
for CVE-2020-25654 for full details, see included ChangeLog file or
https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.0.5-rc2 -
Remove dependencies to nagios-plugins from metadata-package - some sync with
structure of upstream spec-file - removed some legacy conditionals - added
with-
cibsecrets - enable some basic gating-tests - remove building documentation
using publican from ELN - rename doc-dir for ELN ---- - Update for new
upstream tarball for release candidate: Pacemaker-2.0.5-rc2, includes fix for
CVE-2020-25654 for full details, see included ChangeLog file or
https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.0.5-rc2 -
Remove dependencies to nagios-plugins from metadata-package - some sync with
structure of upstream spec-file - removed some legacy conditionals - added
with-
cibsecrets - enable some basic gating-tests - remove building documentation
using publican from ELN - rename doc-dir for ELN
-------------------------------------------------------------------------------
-
ChangeLog:

* Wed Nov 18 2020 Klaus Wenninger <kwenning@redhat.com> - 2.0.5-0.7.rc3
- a little more syncing with upstream spec-file
* Tue Nov 17 2020 Klaus Wenninger <kwenning@redhat.com> - 2.0.5-0.6.rc3
- Update for new upstream tarball for release candidate: Pacemaker-2.0.5-rc3
for full details, see included ChangeLog file or
https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.0.5-rc3
- Corosync in Fedora now provides corosync-devel as well in isa-flavor
* Sun Nov 1 2020 Klaus Wenninger <kwenning@redhat.com> - 2.0.5-0.5.rc2
- Update for new upstream tarball for release candidate: Pacemaker-2.0.5-rc2,
includes fix for CVE-2020-25654
for full details, see included ChangeLog file or
https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.0.5-rc2
- Remove dependencies to nagios-plugins from metadata-package
- some sync with structure of upstream spec-file
- removed some legacy conditionals
- added with-cibsecrets
- enable some basic gating-tests
- remove building documentation using publican from ELN
- rename doc-dir for ELN
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1889581 - pacemaker-2.0.5-rc2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1889581
[ 2 ] Bug #1891718 - CVE-2020-25654 pacemaker: ACL restrictions bypass
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1891718
[ 3 ] Bug #1898409 - pacemaker-2.0.5-rc3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1898409
-------------------------------------------------------------------------------
-

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-3d0e38b9e7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung