pacemaker 1.1.18-2ubuntu1.18.10.1 source package in Ubuntu

Changelog

pacemaker (1.1.18-2ubuntu1.18.10.1) cosmic-security; urgency=medium

  * SECURITY UPDATE: DoS and local privilege escalation in client-server
    authentication
    - debian/patches/CVE-2018-1687x-1.patch: make crm_pid_active more
      precise as to when detections fail in include/crm_internal.h,
      lib/common/utils.c.
    - debian/patches/CVE-2018-1687x-2.patch: add new helpers to allow IPC
      client side to authenticate the server in configure.ac,
      include/crm/common/Makefile.am, include/crm/common/ipc.h,
      include/crm/common/ipc_internal.h, lib/common/ipc.c.
    - debian/patches/CVE-2018-1687x-3.patch: pacemakerd to trust
      pre-existing processes via new checks instead in mcp/pacemaker.c.
    - debian/patches/CVE-2018-1687x-4.patch: other daemons to authenticate
      IPC servers of fellow processes in lib/cluster/corosync.c,
      lib/cluster/cpg.c, lib/common/ipc.c, mcp/corosync.c.
    - debian/patches/CVE-2018-1687x-5.patch: CPG users to be careful about
      now-more-probable rival processes in attrd/main.c, cib/main.c,
      crmd/main.c, fencing/main.c, lib/cluster/cpg.c.
    - debian/patches/CVE-2018-1687x-6.patch: fix possible NULL pointer
      dereference in crmd/control.c.
    - debian/libcrmcommon3.symbols: added new symbols.
    - CVE-2018-16877
    - CVE-2018-16878
  * SECURITY UPDATE: information disclosure via use-after-free
    - debian/patches/CVE-2019-3885.patch: fix alert handling in
      lib/services/services.c, lib/services/services_linux.c.
    - CVE-2019-3885

 -- Marc Deslauriers <email address hidden>  Thu, 18 Apr 2019 07:32:00 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2019-04-18
Uploaded to:
Cosmic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
pacemaker_1.1.18.orig.tar.gz 5.1 MiB a71921c1e2a93c5bed6199fb41464a1cff887be515f4a0ffbc2c92bc98d233af
pacemaker_1.1.18-2ubuntu1.18.10.1.debian.tar.xz 99.4 KiB 79cdcbe5b1e51b40616734661de630cfc06640564216aabc56035769707e6ce8
pacemaker_1.1.18-2ubuntu1.18.10.1.dsc 3.9 KiB c702e0382df8856852a788905475bbb9ee4af1491603e62c3d3715ed15e3a4af

View changes file

Binary packages built by this source

libcib-dev: No summary available for libcib-dev in ubuntu cosmic.

No description available for libcib-dev in ubuntu cosmic.

libcib4: No summary available for libcib4 in ubuntu cosmic.

No description available for libcib4 in ubuntu cosmic.

libcib4-dbgsym: No summary available for libcib4-dbgsym in ubuntu cosmic.

No description available for libcib4-dbgsym in ubuntu cosmic.

libcrmcluster-dev: No summary available for libcrmcluster-dev in ubuntu cosmic.

No description available for libcrmcluster-dev in ubuntu cosmic.

libcrmcluster4: No summary available for libcrmcluster4 in ubuntu cosmic.

No description available for libcrmcluster4 in ubuntu cosmic.

libcrmcluster4-dbgsym: No summary available for libcrmcluster4-dbgsym in ubuntu cosmic.

No description available for libcrmcluster4-dbgsym in ubuntu cosmic.

libcrmcommon-dev: No summary available for libcrmcommon-dev in ubuntu cosmic.

No description available for libcrmcommon-dev in ubuntu cosmic.

libcrmcommon3: No summary available for libcrmcommon3 in ubuntu cosmic.

No description available for libcrmcommon3 in ubuntu cosmic.

libcrmcommon3-dbgsym: No summary available for libcrmcommon3-dbgsym in ubuntu cosmic.

No description available for libcrmcommon3-dbgsym in ubuntu cosmic.

libcrmservice-dev: No summary available for libcrmservice-dev in ubuntu cosmic.

No description available for libcrmservice-dev in ubuntu cosmic.

libcrmservice3: No summary available for libcrmservice3 in ubuntu cosmic.

No description available for libcrmservice3 in ubuntu cosmic.

libcrmservice3-dbgsym: No summary available for libcrmservice3-dbgsym in ubuntu cosmic.

No description available for libcrmservice3-dbgsym in ubuntu cosmic.

liblrmd-dev: No summary available for liblrmd-dev in ubuntu cosmic.

No description available for liblrmd-dev in ubuntu cosmic.

liblrmd1: No summary available for liblrmd1 in ubuntu cosmic.

No description available for liblrmd1 in ubuntu cosmic.

liblrmd1-dbgsym: No summary available for liblrmd1-dbgsym in ubuntu cosmic.

No description available for liblrmd1-dbgsym in ubuntu cosmic.

libpe-rules2: No summary available for libpe-rules2 in ubuntu cosmic.

No description available for libpe-rules2 in ubuntu cosmic.

libpe-rules2-dbgsym: No summary available for libpe-rules2-dbgsym in ubuntu cosmic.

No description available for libpe-rules2-dbgsym in ubuntu cosmic.

libpe-status10: No summary available for libpe-status10 in ubuntu cosmic.

No description available for libpe-status10 in ubuntu cosmic.

libpe-status10-dbgsym: No summary available for libpe-status10-dbgsym in ubuntu cosmic.

No description available for libpe-status10-dbgsym in ubuntu cosmic.

libpengine-dev: No summary available for libpengine-dev in ubuntu cosmic.

No description available for libpengine-dev in ubuntu cosmic.

libpengine10: No summary available for libpengine10 in ubuntu cosmic.

No description available for libpengine10 in ubuntu cosmic.

libpengine10-dbgsym: No summary available for libpengine10-dbgsym in ubuntu cosmic.

No description available for libpengine10-dbgsym in ubuntu cosmic.

libstonithd-dev: No summary available for libstonithd-dev in ubuntu cosmic.

No description available for libstonithd-dev in ubuntu cosmic.

libstonithd2: No summary available for libstonithd2 in ubuntu cosmic.

No description available for libstonithd2 in ubuntu cosmic.

libstonithd2-dbgsym: No summary available for libstonithd2-dbgsym in ubuntu cosmic.

No description available for libstonithd2-dbgsym in ubuntu cosmic.

libtransitioner2: No summary available for libtransitioner2 in ubuntu cosmic.

No description available for libtransitioner2 in ubuntu cosmic.

libtransitioner2-dbgsym: No summary available for libtransitioner2-dbgsym in ubuntu cosmic.

No description available for libtransitioner2-dbgsym in ubuntu cosmic.

pacemaker: No summary available for pacemaker in ubuntu cosmic.

No description available for pacemaker in ubuntu cosmic.

pacemaker-cli-utils: No summary available for pacemaker-cli-utils in ubuntu cosmic.

No description available for pacemaker-cli-utils in ubuntu cosmic.

pacemaker-cli-utils-dbgsym: No summary available for pacemaker-cli-utils-dbgsym in ubuntu cosmic.

No description available for pacemaker-cli-utils-dbgsym in ubuntu cosmic.

pacemaker-common: No summary available for pacemaker-common in ubuntu cosmic.

No description available for pacemaker-common in ubuntu cosmic.

pacemaker-dbgsym: No summary available for pacemaker-dbgsym in ubuntu cosmic.

No description available for pacemaker-dbgsym in ubuntu cosmic.

pacemaker-doc: No summary available for pacemaker-doc in ubuntu cosmic.

No description available for pacemaker-doc in ubuntu cosmic.

pacemaker-remote: No summary available for pacemaker-remote in ubuntu cosmic.

No description available for pacemaker-remote in ubuntu cosmic.

pacemaker-remote-dbgsym: No summary available for pacemaker-remote-dbgsym in ubuntu cosmic.

No description available for pacemaker-remote-dbgsym in ubuntu cosmic.

pacemaker-resource-agents: No summary available for pacemaker-resource-agents in ubuntu cosmic.

No description available for pacemaker-resource-agents in ubuntu cosmic.