Format: 1.8 Date: Thu, 18 Apr 2019 07:56:54 -0400 Source: pacemaker Binary: pacemaker-common pacemaker-resource-agents pacemaker pacemaker-cli-utils pacemaker-remote pacemaker-doc libcib4 libcib-dev libcrmcluster4 libcrmcluster-dev libcrmcommon3 libcrmcommon-dev libcrmservice3 libcrmservice-dev liblrmd1 liblrmd-dev libpe-rules2 libpe-status10 libpengine10 libpengine-dev libstonithd2 libstonithd-dev libtransitioner2 Architecture: amd64 all amd64_translations Version: 1.1.18-0ubuntu1.1 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcib-dev - cluster resource manager CIB library development libcib4 - cluster resource manager CIB library libcrmcluster-dev - cluster resource manager cluster library development libcrmcluster4 - cluster resource manager cluster library libcrmcommon-dev - cluster resource manager common library development libcrmcommon3 - cluster resource manager common library libcrmservice-dev - cluster resource manager service library development libcrmservice3 - cluster resource manager service library liblrmd-dev - cluster resource manager LRMD library development liblrmd1 - cluster resource manager LRMD library libpe-rules2 - cluster resource manager Policy Engine rules library libpe-status10 - cluster resource manager Policy Engine status library libpengine-dev - cluster resource manager Policy Engine library development libpengine10 - cluster resource manager Policy Engine library libstonithd-dev - cluster resource manager STONITH daemon library development libstonithd2 - cluster resource manager STONITH daemon library libtransitioner2 - cluster resource manager transitioner library pacemaker - cluster resource manager pacemaker-cli-utils - cluster resource manager command line utilities pacemaker-common - cluster resource manager common files pacemaker-doc - cluster resource manager HTML documentation pacemaker-remote - cluster resource manager proxy daemon for remote nodes pacemaker-resource-agents - cluster resource manager general resource agents Changes: pacemaker (1.1.18-0ubuntu1.1) bionic-security; urgency=medium . * SECURITY UPDATE: DoS and local privilege escalation in client-server authentication - debian/patches/CVE-2018-1687x-1.patch: make crm_pid_active more precise as to when detections fail in include/crm_internal.h, lib/common/utils.c. - debian/patches/CVE-2018-1687x-2.patch: add new helpers to allow IPC client side to authenticate the server in configure.ac, include/crm/common/Makefile.am, include/crm/common/ipc.h, include/crm/common/ipc_internal.h, lib/common/ipc.c. - debian/patches/CVE-2018-1687x-3.patch: pacemakerd to trust pre-existing processes via new checks instead in mcp/pacemaker.c. - debian/patches/CVE-2018-1687x-4.patch: other daemons to authenticate IPC servers of fellow processes in lib/cluster/corosync.c, lib/cluster/cpg.c, lib/common/ipc.c, mcp/corosync.c. - debian/patches/CVE-2018-1687x-5.patch: CPG users to be careful about now-more-probable rival processes in attrd/main.c, cib/main.c, crmd/main.c, fencing/main.c, lib/cluster/cpg.c. - debian/patches/CVE-2018-1687x-6.patch: fix possible NULL pointer dereference in crmd/control.c. - debian/libcrmcommon3.symbols: added new symbols. - CVE-2018-16877 - CVE-2018-16878 * SECURITY UPDATE: information disclosure via use-after-free - debian/patches/CVE-2019-3885.patch: fix alert handling in lib/services/services.c, lib/services/services_linux.c. - CVE-2019-3885 Checksums-Sha1: 0fa9901667eba8c875917dd4e6050eed3e45fca7 11348 libcib-dev_1.1.18-0ubuntu1.1_amd64.deb d0a89cc864ad62cb89419fa5f654cc21b6c4ad9e 114532 libcib4-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb f3523e5bcff50aeda3c7aeced3ff66e4aaa3d3b9 51304 libcib4_1.1.18-0ubuntu1.1_amd64.deb 3e8636cf39e6607840577cc9a383d2311f8fd580 11584 libcrmcluster-dev_1.1.18-0ubuntu1.1_amd64.deb ffb7214b5f79b6fe2c2899558580a26f2768f6d7 83788 libcrmcluster4-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb cb6b8ab2a91a5b7cf2d83a477ce50b6da4ce4a66 41860 libcrmcluster4_1.1.18-0ubuntu1.1_amd64.deb da1fda62a158622a0852683fd1fdadae6bf995ac 30096 libcrmcommon-dev_1.1.18-0ubuntu1.1_amd64.deb 9557468a618eae8f8565e4e9380bfd8d9afabcc4 372860 libcrmcommon3-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 5c75d830790edf7d5a16545f434fa4dbc38b6812 147852 libcrmcommon3_1.1.18-0ubuntu1.1_amd64.deb c23d7278ac4f09e972f35046cd95abc5b171ab4f 13012 libcrmservice-dev_1.1.18-0ubuntu1.1_amd64.deb a179ca1d1045da35e469d5bd040ae0453a64f9f2 72540 libcrmservice3-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 0fd4a919c360685d4d740b0779ed6167ed7fea49 37048 libcrmservice3_1.1.18-0ubuntu1.1_amd64.deb 6bc4ff55c05cfbff034310acfb9c83c8ad649e81 13868 liblrmd-dev_1.1.18-0ubuntu1.1_amd64.deb d846918b5ab84cccba7ef189af46e066437ab86f 61068 liblrmd1-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 10547f3dd8a5c5f198331313fe976cfdd6521c0b 28792 liblrmd1_1.1.18-0ubuntu1.1_amd64.deb 0ccc0506b1511fcaa06de80a552f24b510162ba7 44336 libpe-rules2-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 41ccd8982d31a25dd9b87ff4f42f1fcfde8123d4 26884 libpe-rules2_1.1.18-0ubuntu1.1_amd64.deb a6fb995cfae33ded9ac134506682226af9fc0081 295628 libpe-status10-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb b767ac296580b525f5569f9e783e51ba7ff6519d 117132 libpe-status10_1.1.18-0ubuntu1.1_amd64.deb 1fb3d3dbd6c5666c1c8630181f06c7a9c01c0d66 15948 libpengine-dev_1.1.18-0ubuntu1.1_amd64.deb 80b81130c81e08bb0d93027dbee52681b122af45 353184 libpengine10-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 0cbae93bcf4a45dfef70c73bb7a56200873cf7ec 141756 libpengine10_1.1.18-0ubuntu1.1_amd64.deb e69d4784de6f648bfafa410e0936eea2c301a986 12496 libstonithd-dev_1.1.18-0ubuntu1.1_amd64.deb 6fdf4e6f30ec485f1ec74e4c698d9d21712ed6a2 57948 libstonithd2-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb b5f015e02801a14b5ca219154a9d2e0bbdaa105e 33184 libstonithd2_1.1.18-0ubuntu1.1_amd64.deb 85098521437db29de91c23b69d4670b5de19f0d0 33512 libtransitioner2-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 6c93ca87e786a034060a9ee5249862bf830f289e 20812 libtransitioner2_1.1.18-0ubuntu1.1_amd64.deb 5802aaa4d08050f647a564679a12bb29268a39f7 394872 pacemaker-cli-utils-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 4ac43139e0da5c8a33541835b42ef6577175cb5d 165064 pacemaker-cli-utils_1.1.18-0ubuntu1.1_amd64.deb c71a01a3007e0932925c98005f8f37ca29f1b8cb 54428 pacemaker-common_1.1.18-0ubuntu1.1_all.deb a3868b3929b095858caef1adb1cfe16edc502bef 903304 pacemaker-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb b9b09b2bf168d648503939a70c20a70ee73d5bd0 36864176 pacemaker-doc_1.1.18-0ubuntu1.1_all.deb 28f1391c0917e19da3753d6bbc0757d5644e4aad 73284 pacemaker-remote-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb b8f16cb91ccb8cce55e61977235834993c63ca94 36292 pacemaker-remote_1.1.18-0ubuntu1.1_amd64.deb 10e29f34001a0299f4e708d8633b825b41e6cc61 47320 pacemaker-resource-agents_1.1.18-0ubuntu1.1_all.deb 0d3dbba255dd50dcc88fc9c3c4fc6c2794893c46 31394 pacemaker_1.1.18-0ubuntu1.1_amd64.buildinfo 29aebb89ab2b0b8bdf69c2ef517e87a85519b0b3 317252 pacemaker_1.1.18-0ubuntu1.1_amd64.deb 3c282867ffa7e270aced298af4153191eec7d05a 693126 pacemaker_1.1.18-0ubuntu1.1_amd64_translations.tar.gz Checksums-Sha256: ae17ed1c2dd3614f3e728430a9cec3aa16c1822b87c15177fc8b88bac3bf6f8c 11348 libcib-dev_1.1.18-0ubuntu1.1_amd64.deb 39d90a1bcea83575b1c78caca7cb4f28641a75321a6518ae033ca66e6dc0ef6b 114532 libcib4-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 28f150e01ae5c123d44ee916952c092148d4c100438bc7d33ba0720434ba023e 51304 libcib4_1.1.18-0ubuntu1.1_amd64.deb 906d890d7dbb256c67c34aa5d2e360253410bf779feab92b9b4289cf7999c183 11584 libcrmcluster-dev_1.1.18-0ubuntu1.1_amd64.deb 8e87d5f862c9841821cc9c02a31b2ba4da0baf5ebd899b5822ab53585920909b 83788 libcrmcluster4-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 68dcc65dc6d8832f6a87fe3b8a162161c24733e43dfe37068816e3adad658509 41860 libcrmcluster4_1.1.18-0ubuntu1.1_amd64.deb 1dfb0ea17fb60af3e754eb3b5eba5f545d39810997d9004067e6598a53d6474f 30096 libcrmcommon-dev_1.1.18-0ubuntu1.1_amd64.deb e664d30815a081a6b7d1ee5aba70865e115ca79f4f9567dbdb1b6b369639c224 372860 libcrmcommon3-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 768234076f1bf91bcf9255a025945cadc5cd5e40b1bb587ce29fc3c69b68b535 147852 libcrmcommon3_1.1.18-0ubuntu1.1_amd64.deb a632edd508a82c85029437ed9f813ad75e9dc372481bbc87d9b991bd458152e0 13012 libcrmservice-dev_1.1.18-0ubuntu1.1_amd64.deb 6b837a3bbcec3064ddcb8a3c37fb7d0d987cb595d3d1dbac154d8c2c87af3cc1 72540 libcrmservice3-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb cd321239cc324979d52a453e953c5a0877d39b8c9211810c640989d91a51ffcc 37048 libcrmservice3_1.1.18-0ubuntu1.1_amd64.deb a474f3a378e2f1ae9140a18ff066387ecac821079cc7a3f9a48a5e896ce2618a 13868 liblrmd-dev_1.1.18-0ubuntu1.1_amd64.deb e848186d03f73b6f4df4c80d01a1f404dedfe75301729170a29f7aabaf0a3b85 61068 liblrmd1-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 0fdf5f807c2b1c53f974099195199b20e141bbec68d323c416500fc9b6d102ac 28792 liblrmd1_1.1.18-0ubuntu1.1_amd64.deb e65b4e905e9b627a21a438fdf8c8c72a3ad06865cfd289f6c53bdc7b3c4a404b 44336 libpe-rules2-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 555f133abfc5d7303ff72822625b0a9faa10bf983efaa5dc22e21974fbfd1807 26884 libpe-rules2_1.1.18-0ubuntu1.1_amd64.deb 587088f77a174d477b4b574e37735fed5809658094b9d82bfc1945459d5606c8 295628 libpe-status10-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb df401b255048508fd7548e5e0e3d86a7278ed7090e5e647b4e75e4ac24ec2653 117132 libpe-status10_1.1.18-0ubuntu1.1_amd64.deb c71d6a0f9feffaab0b113a7a529e530aaad6038733816d2c48572b4b9ffee53c 15948 libpengine-dev_1.1.18-0ubuntu1.1_amd64.deb 5f0aad5ef8ef10dc90d73b3b4923db6f4701c648c89edca0f4f9b948b2fb64b8 353184 libpengine10-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 0767bad577c8e5e0a6067b16dc8481c84d6614a9341638a340b2267ef77506f7 141756 libpengine10_1.1.18-0ubuntu1.1_amd64.deb 9e92058d8586869a7f5d3f5abde4f30c3e701468f26d054fc22e1a71f7c2692b 12496 libstonithd-dev_1.1.18-0ubuntu1.1_amd64.deb 17c212536bfec115f53048722a11dc5f5462fc0abc36d082d8fe3f876e3aa1fc 57948 libstonithd2-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb cbeb92ee746bab0c97740afdc149cecea584acf3b7b39f75f39d68de52b4f66f 33184 libstonithd2_1.1.18-0ubuntu1.1_amd64.deb 6340b2eba5a0ca80e3d764490a260517ab5a977be3e60a7c46af14a59047f745 33512 libtransitioner2-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 30e4d1382edfb8cdaff6c0f2e36aeda46574886fb5cbbcaaaecb6ae35d87f461 20812 libtransitioner2_1.1.18-0ubuntu1.1_amd64.deb 42a07caf3ea3affda51c21eb704dc2cdcb6db5379d28364d961129a17ad66044 394872 pacemaker-cli-utils-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 38b6cd2c316c2d0b46bcf7d145b5c5a383d36ba58a4e258ba838a9cebc799802 165064 pacemaker-cli-utils_1.1.18-0ubuntu1.1_amd64.deb 1a6dad670c4020c3c86ffd44c9aa78a1eaf7e912dd01bf49fb65d956e914798c 54428 pacemaker-common_1.1.18-0ubuntu1.1_all.deb 15bce46134fbf955b2abbae4b3e9eed8d7891948f3094bddca3eeb02b87325ca 903304 pacemaker-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb e5783314a440d3ab9832e64034d8e2636829bd8a25cf3ace09c33310ae92a777 36864176 pacemaker-doc_1.1.18-0ubuntu1.1_all.deb ad7e5aa406c7196dd65d394ee425497c386774285753235927b7fdf047df20a7 73284 pacemaker-remote-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 3efec9fd320f56db8f47950444d3e8d51d5917d1010c575f178b8edc747fa735 36292 pacemaker-remote_1.1.18-0ubuntu1.1_amd64.deb 0635061aa9cc369af92cdcfd131cb2d776bf1da95d1ec529ae7164a2f406d8c9 47320 pacemaker-resource-agents_1.1.18-0ubuntu1.1_all.deb 7e06eb323be64e224ac5aea975376f85a4882179ea58ff739c7048a2fe1cdae3 31394 pacemaker_1.1.18-0ubuntu1.1_amd64.buildinfo 1c101a5e5e26d9c9054a627e535449d6e87e30708653156d5667a6bb064cc316 317252 pacemaker_1.1.18-0ubuntu1.1_amd64.deb d2abbb4a63dcc636a4cee3d3e1bc405570fb7ef22722dc1f3119d2db4267d561 693126 pacemaker_1.1.18-0ubuntu1.1_amd64_translations.tar.gz Files: 6e0b12ce13c8e11d383a3ec7498067bc 11348 libdevel optional libcib-dev_1.1.18-0ubuntu1.1_amd64.deb cfdbe7a6ef0b748339e788cdede31072 114532 debug optional libcib4-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 41782d2b9bbd6cb2cf6597c695243d1f 51304 libs optional libcib4_1.1.18-0ubuntu1.1_amd64.deb 24bdcabf2dc1e231a55470c3141240d7 11584 libdevel optional libcrmcluster-dev_1.1.18-0ubuntu1.1_amd64.deb cc6416f53149b52d7efd276dd8381adb 83788 debug optional libcrmcluster4-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 1ce42815cd93ee0772780cdf69bce9aa 41860 libs optional libcrmcluster4_1.1.18-0ubuntu1.1_amd64.deb 06e49a01df11c64ab32952d4b0f33eb2 30096 libdevel optional libcrmcommon-dev_1.1.18-0ubuntu1.1_amd64.deb b27e2e039601c6b3d27964a24d767774 372860 debug optional libcrmcommon3-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 579f4f50d5b50071998c130c2434855e 147852 libs optional libcrmcommon3_1.1.18-0ubuntu1.1_amd64.deb 86a24a512d65da71c96ca9dd4ae56a52 13012 libdevel optional libcrmservice-dev_1.1.18-0ubuntu1.1_amd64.deb 52d547a293e8fbf899fdfb189feecc51 72540 debug optional libcrmservice3-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 854ee45f85607f79e1434251e4e788d8 37048 libs optional libcrmservice3_1.1.18-0ubuntu1.1_amd64.deb 3ff3c7796128613e457b27c41cd31931 13868 libdevel optional liblrmd-dev_1.1.18-0ubuntu1.1_amd64.deb cf0ad23e00df3efceece0af52179749b 61068 debug optional liblrmd1-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 8e0900ee6af87ead4137cc7d7acbdcf1 28792 libs optional liblrmd1_1.1.18-0ubuntu1.1_amd64.deb 7628466c1366109b56613b29eadaef84 44336 debug optional libpe-rules2-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb c7cdad1aae26273085f03b5f5615dbf3 26884 libs optional libpe-rules2_1.1.18-0ubuntu1.1_amd64.deb 39a6ef955779638d6200b497d1b15d7b 295628 debug optional libpe-status10-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 2dbbb50267e6c8cacacdb1e60da07c32 117132 libs optional libpe-status10_1.1.18-0ubuntu1.1_amd64.deb cbbe1aa82a32f5a108033847c7e52488 15948 libdevel optional libpengine-dev_1.1.18-0ubuntu1.1_amd64.deb f59da348cfde5097d6b9dfff4f96ff56 353184 debug optional libpengine10-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb bdde6be529a01fa14fdca04e3c41e8f7 141756 libs optional libpengine10_1.1.18-0ubuntu1.1_amd64.deb dccb4f0fba42a6a93858f690f50a8bf1 12496 libdevel optional libstonithd-dev_1.1.18-0ubuntu1.1_amd64.deb fce57e72ea1c8eb9190497a2e440fc24 57948 debug optional libstonithd2-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 6ac1aa94ccae80af78cc7dd0e8d156ab 33184 libs optional libstonithd2_1.1.18-0ubuntu1.1_amd64.deb 84dded45e31d98f9fd64723a862dfe0c 33512 debug optional libtransitioner2-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 27c5f5872baa722bcd70deab5a6b4088 20812 libs optional libtransitioner2_1.1.18-0ubuntu1.1_amd64.deb 39005fc8eca15144a169aabb803bea87 394872 debug optional pacemaker-cli-utils-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb fa5d358ac7c76a1a1aae876097757244 165064 admin optional pacemaker-cli-utils_1.1.18-0ubuntu1.1_amd64.deb 1d3f6783a63b7fe6ecf7884fb60102e7 54428 admin optional pacemaker-common_1.1.18-0ubuntu1.1_all.deb 5b4a5f751d669d688dbe3157fb9c7c16 903304 debug optional pacemaker-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb bd8f3fc3405d9d7b3b64cae1ca6e58fb 36864176 doc optional pacemaker-doc_1.1.18-0ubuntu1.1_all.deb a72daeea76b9fe1150c1fc6c686b2aa1 73284 debug optional pacemaker-remote-dbgsym_1.1.18-0ubuntu1.1_amd64.ddeb 1142eb1971d41ea544a468e086cf485b 36292 admin optional pacemaker-remote_1.1.18-0ubuntu1.1_amd64.deb 6cd8886439cd07b1f739d4e2282fbb19 47320 admin optional pacemaker-resource-agents_1.1.18-0ubuntu1.1_all.deb eabd4e9d886b89148268050e83a7472a 31394 admin optional pacemaker_1.1.18-0ubuntu1.1_amd64.buildinfo d001051ea569bb5ac1b81765a827d335 317252 admin optional pacemaker_1.1.18-0ubuntu1.1_amd64.deb 0a085581057a6c9f0a8bb90cd4148fed 693126 raw-translations - pacemaker_1.1.18-0ubuntu1.1_amd64_translations.tar.gz Original-Maintainer: Debian HA Maintainers