pacemaker 1.1.18-2ubuntu1.19.04.1 source package in Ubuntu
Changelog
pacemaker (1.1.18-2ubuntu1.19.04.1) disco-security; urgency=medium
* SECURITY UPDATE: DoS and local privilege escalation in client-server
authentication
- debian/patches/CVE-2018-1687x-1.patch: make crm_pid_active more
precise as to when detections fail in include/crm_internal.h,
lib/common/utils.c.
- debian/patches/CVE-2018-1687x-2.patch: add new helpers to allow IPC
client side to authenticate the server in configure.ac,
include/crm/common/Makefile.am, include/crm/common/ipc.h,
include/crm/common/ipc_internal.h, lib/common/ipc.c.
- debian/patches/CVE-2018-1687x-3.patch: pacemakerd to trust
pre-existing processes via new checks instead in mcp/pacemaker.c.
- debian/patches/CVE-2018-1687x-4.patch: other daemons to authenticate
IPC servers of fellow processes in lib/cluster/corosync.c,
lib/cluster/cpg.c, lib/common/ipc.c, mcp/corosync.c.
- debian/patches/CVE-2018-1687x-5.patch: CPG users to be careful about
now-more-probable rival processes in attrd/main.c, cib/main.c,
crmd/main.c, fencing/main.c, lib/cluster/cpg.c.
- debian/patches/CVE-2018-1687x-6.patch: fix possible NULL pointer
dereference in crmd/control.c.
- debian/libcrmcommon3.symbols: added new symbols.
- CVE-2018-16877
- CVE-2018-16878
* SECURITY UPDATE: information disclosure via use-after-free
- debian/patches/CVE-2019-3885.patch: fix alert handling in
lib/services/services.c, lib/services/services_linux.c.
- CVE-2019-3885
-- Marc Deslauriers <email address hidden> Thu, 18 Apr 2019 07:32:00 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Disco
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- admin
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| pacemaker_1.1.18.orig.tar.gz | 5.1 MiB | a71921c1e2a93c5bed6199fb41464a1cff887be515f4a0ffbc2c92bc98d233af |
| pacemaker_1.1.18-2ubuntu1.19.04.1.debian.tar.xz | 99.5 KiB | e3aad46483ffb8e0fd233b57ba0694374ed9b65406d3ca0f8b702d9a3b52169b |
| pacemaker_1.1.18-2ubuntu1.19.04.1.dsc | 3.9 KiB | 6f426d667bfd189a0fd013791feede5c74feec292f36e375d9dc541dda297d03 |
Available diffs
Binary packages built by this source
- libcib-dev: No summary available for libcib-dev in ubuntu disco.
No description available for libcib-dev in ubuntu disco.
- libcib4: No summary available for libcib4 in ubuntu disco.
No description available for libcib4 in ubuntu disco.
- libcib4-dbgsym: No summary available for libcib4-dbgsym in ubuntu disco.
No description available for libcib4-dbgsym in ubuntu disco.
- libcrmcluster-dev: No summary available for libcrmcluster-dev in ubuntu disco.
No description available for libcrmcluster-dev in ubuntu disco.
- libcrmcluster4: No summary available for libcrmcluster4 in ubuntu eoan.
No description available for libcrmcluster4 in ubuntu eoan.
- libcrmcluster4-dbgsym: No summary available for libcrmcluster4-dbgsym in ubuntu eoan.
No description available for libcrmcluster4-
dbgsym in ubuntu eoan.
- libcrmcommon-dev: No summary available for libcrmcommon-dev in ubuntu disco.
No description available for libcrmcommon-dev in ubuntu disco.
- libcrmcommon3: No summary available for libcrmcommon3 in ubuntu disco.
No description available for libcrmcommon3 in ubuntu disco.
- libcrmcommon3-dbgsym: No summary available for libcrmcommon3-dbgsym in ubuntu eoan.
No description available for libcrmcommon3-
dbgsym in ubuntu eoan.
- libcrmservice-dev: No summary available for libcrmservice-dev in ubuntu disco.
No description available for libcrmservice-dev in ubuntu disco.
- libcrmservice3: No summary available for libcrmservice3 in ubuntu disco.
No description available for libcrmservice3 in ubuntu disco.
- libcrmservice3-dbgsym: No summary available for libcrmservice3-dbgsym in ubuntu eoan.
No description available for libcrmservice3-
dbgsym in ubuntu eoan.
- liblrmd-dev: No summary available for liblrmd-dev in ubuntu disco.
No description available for liblrmd-dev in ubuntu disco.
- liblrmd1: No summary available for liblrmd1 in ubuntu disco.
No description available for liblrmd1 in ubuntu disco.
- liblrmd1-dbgsym: No summary available for liblrmd1-dbgsym in ubuntu disco.
No description available for liblrmd1-dbgsym in ubuntu disco.
- libpe-rules2: No summary available for libpe-rules2 in ubuntu eoan.
No description available for libpe-rules2 in ubuntu eoan.
- libpe-rules2-dbgsym: No summary available for libpe-rules2-dbgsym in ubuntu disco.
No description available for libpe-rules2-dbgsym in ubuntu disco.
- libpe-status10: No summary available for libpe-status10 in ubuntu disco.
No description available for libpe-status10 in ubuntu disco.
- libpe-status10-dbgsym: No summary available for libpe-status10-dbgsym in ubuntu disco.
No description available for libpe-status10-
dbgsym in ubuntu disco.
- libpengine-dev: No summary available for libpengine-dev in ubuntu eoan.
No description available for libpengine-dev in ubuntu eoan.
- libpengine10: No summary available for libpengine10 in ubuntu disco.
No description available for libpengine10 in ubuntu disco.
- libpengine10-dbgsym: No summary available for libpengine10-dbgsym in ubuntu disco.
No description available for libpengine10-dbgsym in ubuntu disco.
- libstonithd-dev: No summary available for libstonithd-dev in ubuntu eoan.
No description available for libstonithd-dev in ubuntu eoan.
- libstonithd2: No summary available for libstonithd2 in ubuntu disco.
No description available for libstonithd2 in ubuntu disco.
- libstonithd2-dbgsym: No summary available for libstonithd2-dbgsym in ubuntu disco.
No description available for libstonithd2-dbgsym in ubuntu disco.
- libtransitioner2: No summary available for libtransitioner2 in ubuntu eoan.
No description available for libtransitioner2 in ubuntu eoan.
- libtransitioner2-dbgsym: No summary available for libtransitioner2-dbgsym in ubuntu disco.
No description available for libtransitioner
2-dbgsym in ubuntu disco.
- pacemaker: No summary available for pacemaker in ubuntu eoan.
No description available for pacemaker in ubuntu eoan.
- pacemaker-cli-utils: No summary available for pacemaker-cli-utils in ubuntu disco.
No description available for pacemaker-cli-utils in ubuntu disco.
- pacemaker-cli-utils-dbgsym: No summary available for pacemaker-cli-utils-dbgsym in ubuntu disco.
No description available for pacemaker-
cli-utils- dbgsym in ubuntu disco.
- pacemaker-common: No summary available for pacemaker-common in ubuntu disco.
No description available for pacemaker-common in ubuntu disco.
- pacemaker-dbgsym: No summary available for pacemaker-dbgsym in ubuntu eoan.
No description available for pacemaker-dbgsym in ubuntu eoan.
- pacemaker-doc: No summary available for pacemaker-doc in ubuntu disco.
No description available for pacemaker-doc in ubuntu disco.
- pacemaker-remote: No summary available for pacemaker-remote in ubuntu disco.
No description available for pacemaker-remote in ubuntu disco.
- pacemaker-remote-dbgsym: No summary available for pacemaker-remote-dbgsym in ubuntu eoan.
No description available for pacemaker-
remote- dbgsym in ubuntu eoan.
- pacemaker-resource-agents: No summary available for pacemaker-resource-agents in ubuntu eoan.
No description available for pacemaker-
resource- agents in ubuntu eoan.
