Format: 1.8 Date: Thu, 18 Apr 2019 07:56:54 -0400 Source: pacemaker Binary: pacemaker-common pacemaker-resource-agents pacemaker pacemaker-cli-utils pacemaker-remote pacemaker-doc libcib4 libcib-dev libcrmcluster4 libcrmcluster-dev libcrmcommon3 libcrmcommon-dev libcrmservice3 libcrmservice-dev liblrmd1 liblrmd-dev libpe-rules2 libpe-status10 libpengine10 libpengine-dev libstonithd2 libstonithd-dev libtransitioner2 Architecture: s390x s390x_translations Version: 1.1.18-0ubuntu1.1 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcib-dev - cluster resource manager CIB library development libcib4 - cluster resource manager CIB library libcrmcluster-dev - cluster resource manager cluster library development libcrmcluster4 - cluster resource manager cluster library libcrmcommon-dev - cluster resource manager common library development libcrmcommon3 - cluster resource manager common library libcrmservice-dev - cluster resource manager service library development libcrmservice3 - cluster resource manager service library liblrmd-dev - cluster resource manager LRMD library development liblrmd1 - cluster resource manager LRMD library libpe-rules2 - cluster resource manager Policy Engine rules library libpe-status10 - cluster resource manager Policy Engine status library libpengine-dev - cluster resource manager Policy Engine library development libpengine10 - cluster resource manager Policy Engine library libstonithd-dev - cluster resource manager STONITH daemon library development libstonithd2 - cluster resource manager STONITH daemon library libtransitioner2 - cluster resource manager transitioner library pacemaker - cluster resource manager pacemaker-cli-utils - cluster resource manager command line utilities pacemaker-common - cluster resource manager common files pacemaker-doc - cluster resource manager HTML documentation pacemaker-remote - cluster resource manager proxy daemon for remote nodes pacemaker-resource-agents - cluster resource manager general resource agents Changes: pacemaker (1.1.18-0ubuntu1.1) bionic-security; urgency=medium . * SECURITY UPDATE: DoS and local privilege escalation in client-server authentication - debian/patches/CVE-2018-1687x-1.patch: make crm_pid_active more precise as to when detections fail in include/crm_internal.h, lib/common/utils.c. - debian/patches/CVE-2018-1687x-2.patch: add new helpers to allow IPC client side to authenticate the server in configure.ac, include/crm/common/Makefile.am, include/crm/common/ipc.h, include/crm/common/ipc_internal.h, lib/common/ipc.c. - debian/patches/CVE-2018-1687x-3.patch: pacemakerd to trust pre-existing processes via new checks instead in mcp/pacemaker.c. - debian/patches/CVE-2018-1687x-4.patch: other daemons to authenticate IPC servers of fellow processes in lib/cluster/corosync.c, lib/cluster/cpg.c, lib/common/ipc.c, mcp/corosync.c. - debian/patches/CVE-2018-1687x-5.patch: CPG users to be careful about now-more-probable rival processes in attrd/main.c, cib/main.c, crmd/main.c, fencing/main.c, lib/cluster/cpg.c. - debian/patches/CVE-2018-1687x-6.patch: fix possible NULL pointer dereference in crmd/control.c. - debian/libcrmcommon3.symbols: added new symbols. - CVE-2018-16877 - CVE-2018-16878 * SECURITY UPDATE: information disclosure via use-after-free - debian/patches/CVE-2019-3885.patch: fix alert handling in lib/services/services.c, lib/services/services_linux.c. - CVE-2019-3885 Checksums-Sha1: 53de0fd46e5cda3753b0b9f525ff0866a89799b7 11340 libcib-dev_1.1.18-0ubuntu1.1_s390x.deb c90b66994f0331cfa75a2ff3bbd40ef3c005a8b7 118100 libcib4-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 451cbe1b1224a08b98ef174b38828b30a82262cf 46020 libcib4_1.1.18-0ubuntu1.1_s390x.deb 04bc6c06f705c0b682814915855dbef82f6665bf 11576 libcrmcluster-dev_1.1.18-0ubuntu1.1_s390x.deb 0c7dcdcfe5a967e317edf6bbef6bd483f3b2e23b 87268 libcrmcluster4-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 901297009198dbb8386cac5ff3b6d4b5eddb4c7f 38808 libcrmcluster4_1.1.18-0ubuntu1.1_s390x.deb e2e04b45bf2babfea6cce3bc56b8a5e57eb5d9b0 30076 libcrmcommon-dev_1.1.18-0ubuntu1.1_s390x.deb d92abdcb308ea1d52202f1fa2b2b04644a62b270 380380 libcrmcommon3-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 99688030acab08fd9eb6eac01ad4f39c0bc93b3f 130872 libcrmcommon3_1.1.18-0ubuntu1.1_s390x.deb e9d7b3846c93bf4168b2daf3aadbaa8d4a0543ad 13008 libcrmservice-dev_1.1.18-0ubuntu1.1_s390x.deb 638247daa16ad9d64bcbe542f8e809a6e4646945 74272 libcrmservice3-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 6f1f30ed2d308d890b36e8ff39150f0405e2d7e7 33636 libcrmservice3_1.1.18-0ubuntu1.1_s390x.deb a22db84151b881d7555754fea5e5a7e9c160d64e 13864 liblrmd-dev_1.1.18-0ubuntu1.1_s390x.deb 6ccc67f25f13784503a9dbc2d9310415291ad9dd 62220 liblrmd1-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 2b1e017649caaada6629cff3ef18990193c353aa 26648 liblrmd1_1.1.18-0ubuntu1.1_s390x.deb 6afd380ab12e08d28836a0bd0fe4b403df4f8551 47560 libpe-rules2-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 1bb156f67266674318aba80053f437bfcf270142 25184 libpe-rules2_1.1.18-0ubuntu1.1_s390x.deb 117179c9bb969a90f13bc78dc08fae4b8e0e4917 311244 libpe-status10-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb af2e53f3ec15703a3474265f3ddfce27a2ef69d1 101412 libpe-status10_1.1.18-0ubuntu1.1_s390x.deb 775dd9b602727b03d49a4f8b919c488207c850d5 15928 libpengine-dev_1.1.18-0ubuntu1.1_s390x.deb c77b9bc7f966ad1e1b13b5e300faabbdfb4e21c3 370592 libpengine10-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb c7a0fd7f997b534be8b6189d49ad64ea3b3c3c4c 120804 libpengine10_1.1.18-0ubuntu1.1_s390x.deb 876f960cadbbf7eefe8e49f753f73a65cd9bacc6 12504 libstonithd-dev_1.1.18-0ubuntu1.1_s390x.deb 725f8e67fd594f4ef44700b6eca8736e09802856 59164 libstonithd2-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb aafd66aeb2b8ee255d741f8182f9a604ba05c687 30228 libstonithd2_1.1.18-0ubuntu1.1_s390x.deb 9b305385e8967fb71b566b3c7262f1597419249b 34972 libtransitioner2-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb b6c4cc5b7073f476e443d7333f6c6904d492aeb0 19260 libtransitioner2_1.1.18-0ubuntu1.1_s390x.deb 2bb74ba37494c5829f717495a07e2e31b5da4929 404132 pacemaker-cli-utils-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 2abe53fdc8cd83432e6656c8c0bbdaa98469ce6c 152592 pacemaker-cli-utils_1.1.18-0ubuntu1.1_s390x.deb 5316fafd490b948664b071559837c909f2453178 926732 pacemaker-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb a2362791fb79cb4d32218f5079f0a6dcbd0004f1 75212 pacemaker-remote-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb a024143de0746d1783daa5396884d78d8193cc0a 34044 pacemaker-remote_1.1.18-0ubuntu1.1_s390x.deb 5e62f32b044af1e960afe8108fa11ccdaa2a062a 19587 pacemaker_1.1.18-0ubuntu1.1_s390x.buildinfo c979a0059fd64be3f2cee22841c1a75ab1ae3e90 283020 pacemaker_1.1.18-0ubuntu1.1_s390x.deb 6540dfc6dd7ec02a614f3994745f49ab9a4881bd 693469 pacemaker_1.1.18-0ubuntu1.1_s390x_translations.tar.gz Checksums-Sha256: 94e21f56a5df3cf327ca47f414f63a9ecfff09b38361a32eb56ef306b4420082 11340 libcib-dev_1.1.18-0ubuntu1.1_s390x.deb dad75a8c81844306085a1b06aa80581fdece3ec88f5e96340a79b4b199bdf397 118100 libcib4-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 8c0ea47d03b839f2e395f89a37a3a9d0ab93c59779eb9e1fc564346c8a3dfdad 46020 libcib4_1.1.18-0ubuntu1.1_s390x.deb d1a73cd1e6c91b05e86c1c8f60e84b5888bf7116754474fa5d3a08858062f6d1 11576 libcrmcluster-dev_1.1.18-0ubuntu1.1_s390x.deb 03dab855e8eef2f41d71590627de24e8399869749afda2425737bcf0f52e32ac 87268 libcrmcluster4-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 768608dc19704d7f65dc2c18b0bc2aa42e581e99cd42a381ddb82067ab91317b 38808 libcrmcluster4_1.1.18-0ubuntu1.1_s390x.deb 187ac24bc364a41ab6d75ecddbbadef8aa79b63e8aea8c7dc00634b0d7ab67c4 30076 libcrmcommon-dev_1.1.18-0ubuntu1.1_s390x.deb d27f619e5496d6f22bdb20f59497d921c3cb48096c4d300e93e6ab7f9859cb67 380380 libcrmcommon3-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 08ab4ed64bb25a8bb8d7eb994834a6d4a6be0b093a9c09a793db4de86e066fb5 130872 libcrmcommon3_1.1.18-0ubuntu1.1_s390x.deb c5f20cb606e58a4ae61391775c17c7581917ebc580c52b9e6b162bb0eea6f9a7 13008 libcrmservice-dev_1.1.18-0ubuntu1.1_s390x.deb b1e2beef548f5fdb2021e66f7ffb0dd71aca3b4c34bf173e52cfb0881a36bc14 74272 libcrmservice3-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 5b5e76b4224a792f06a100c5b6f2ff0f4f211e59959a7c2317990cda49feb57f 33636 libcrmservice3_1.1.18-0ubuntu1.1_s390x.deb ca48bbb84238e444db953f007c0a30d693d52e050de3cc56203eefd6faca1250 13864 liblrmd-dev_1.1.18-0ubuntu1.1_s390x.deb 1ed9959f733de91c687b2737759941bc3f040b39f8b50ecda5d67d6a9083bf60 62220 liblrmd1-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 3ebafa5e9ac10ad5df107ccd660964700bce1e3fc6a73228618cd50ee1d44719 26648 liblrmd1_1.1.18-0ubuntu1.1_s390x.deb a042b0adda632eae034a6da0dc11d37a2c983da85896843cd44dd0e0fa706cba 47560 libpe-rules2-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb d8af7ad29010f4d8250c945f7f277377254bdf5772f2a5e271e8a6a547a81f87 25184 libpe-rules2_1.1.18-0ubuntu1.1_s390x.deb 9597a49176116d8941c0fdf8ee649066734cf7dc9c7675da95b18a30832e3401 311244 libpe-status10-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 53be94958efec5908e0e7a0d876bda2d643cb4a208a3e20796e416c25a7d1aa8 101412 libpe-status10_1.1.18-0ubuntu1.1_s390x.deb 0d0f79db57922bef530ef58d60ff7c496ba1fba8a601857fb9d70e7b7b0c2b86 15928 libpengine-dev_1.1.18-0ubuntu1.1_s390x.deb 1cfabc709d6fa714b5b5ae4d4f52636a8a773e0fe1e175ac4a8f45692ebf1acf 370592 libpengine10-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb d0efbb281825b31e4d34494a8f47d12369d67f41b116991b838ed7c061addbe1 120804 libpengine10_1.1.18-0ubuntu1.1_s390x.deb d49ebe680639357f4d00a1c2a0d559a06e0e9e3350a9186d76d0b4d212d7cf24 12504 libstonithd-dev_1.1.18-0ubuntu1.1_s390x.deb 1944da40e48d57283f7735a01c416c42f7258675dfc1f886ca1f4c07d6f91f89 59164 libstonithd2-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 42e0a0064e262b4e5fa29495be9debfd7cf8e8afb0569923a616b815733ca483 30228 libstonithd2_1.1.18-0ubuntu1.1_s390x.deb 4bb8596793fefb566e026b49c25a78c42146b6c34f1794f7945176ef120f6bc4 34972 libtransitioner2-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb d95e319545d4d0848f92bcd23f82398eb51ecc638edd693f118edadeb4c945cd 19260 libtransitioner2_1.1.18-0ubuntu1.1_s390x.deb ccc3ed729d107b77152d638812d1e956d29b7caa7b744cb1dcde87a144db3c32 404132 pacemaker-cli-utils-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 3e77f5a827a2033a8b52e7503dfc37ce237ccfbd7ce31b7abef8b6cfb71906a7 152592 pacemaker-cli-utils_1.1.18-0ubuntu1.1_s390x.deb 0d6d433816d7959b8bd4c38fa501d0fe07c125710aa18e93e4b2994ace955478 926732 pacemaker-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 510ad1192bf380199d1aa711bafdeaa09760500cfeaa495d9507b0a9c1a2f3fd 75212 pacemaker-remote-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 834fb0166829a81fad6b9455d0ecfd882be5a92167d474516a1afbbe4a421d0d 34044 pacemaker-remote_1.1.18-0ubuntu1.1_s390x.deb 91ec0836b74d74a47ac40fb3ca844f55d6037b75d4ac3e7c3cda8c246ea3c207 19587 pacemaker_1.1.18-0ubuntu1.1_s390x.buildinfo a2cec359b1c1c80743ba8eedb54bce5d7f1a260b2aa5fbde17033cfad8682511 283020 pacemaker_1.1.18-0ubuntu1.1_s390x.deb 91cef3dac3b97fb8166a13fb4ab4766894bbf7a1c8369e4606548348d968c6bb 693469 pacemaker_1.1.18-0ubuntu1.1_s390x_translations.tar.gz Files: 7c8495f6ee3fbfe0e007e36fcda44d27 11340 libdevel optional libcib-dev_1.1.18-0ubuntu1.1_s390x.deb 9609a1eb143e1862b999268c440617a1 118100 debug optional libcib4-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 5923c6da730832d01322b79f82e9147d 46020 libs optional libcib4_1.1.18-0ubuntu1.1_s390x.deb e3654fa4735ea287253bfcd28637c7da 11576 libdevel optional libcrmcluster-dev_1.1.18-0ubuntu1.1_s390x.deb dae116a216a38a16a64903069f7b0604 87268 debug optional libcrmcluster4-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 99e86a0e35692251c0391e648b3cafaf 38808 libs optional libcrmcluster4_1.1.18-0ubuntu1.1_s390x.deb 830097c3f8d8fd678e4e69f220578d33 30076 libdevel optional libcrmcommon-dev_1.1.18-0ubuntu1.1_s390x.deb e9136d40421bbabfd6d3d60eda0d269d 380380 debug optional libcrmcommon3-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 584c2f8d4f83d8793a87602da013d498 130872 libs optional libcrmcommon3_1.1.18-0ubuntu1.1_s390x.deb bea59c011c312bd8ef06d83a14318142 13008 libdevel optional libcrmservice-dev_1.1.18-0ubuntu1.1_s390x.deb 880872e383413041eec35aab41401f73 74272 debug optional libcrmservice3-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 7ea5133bd29fefa54c3d37a25281a886 33636 libs optional libcrmservice3_1.1.18-0ubuntu1.1_s390x.deb ebde8199a3e7c01a0adb48ad05cab3ba 13864 libdevel optional liblrmd-dev_1.1.18-0ubuntu1.1_s390x.deb 33145531f55e009abe02c248f8d45feb 62220 debug optional liblrmd1-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb bd69c8bb990ecf9e9e4ba983b8e084bb 26648 libs optional liblrmd1_1.1.18-0ubuntu1.1_s390x.deb efa3de697f55ea2a5c3723ea2cb5476e 47560 debug optional libpe-rules2-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 55d148c4a9c7e654b4ba3aff30adf994 25184 libs optional libpe-rules2_1.1.18-0ubuntu1.1_s390x.deb 4fa7032149ae8abf132a6f97af28bac7 311244 debug optional libpe-status10-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 1de8f0ee8e796554fe44346f6cf5ba83 101412 libs optional libpe-status10_1.1.18-0ubuntu1.1_s390x.deb f9d1362c157694b87ff2be42c2bf2118 15928 libdevel optional libpengine-dev_1.1.18-0ubuntu1.1_s390x.deb e63a62e4c57150a9341060ebba075dc8 370592 debug optional libpengine10-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb b4ed2a78db5057b2f2c74a3498fe308e 120804 libs optional libpengine10_1.1.18-0ubuntu1.1_s390x.deb edc280d31eeb205017b16b296906bfea 12504 libdevel optional libstonithd-dev_1.1.18-0ubuntu1.1_s390x.deb 98a8e269035b48b3ea5a1e0d8eab1e3d 59164 debug optional libstonithd2-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 893bea93b2dfdc03ebd16ec46fda942c 30228 libs optional libstonithd2_1.1.18-0ubuntu1.1_s390x.deb d32a24fc82e7a73a5180217abd08a67a 34972 debug optional libtransitioner2-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb dd4d710410a5277ad3238adbd66b21d6 19260 libs optional libtransitioner2_1.1.18-0ubuntu1.1_s390x.deb 5729ec2fdd783aec5d2edd49ff103778 404132 debug optional pacemaker-cli-utils-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 76d5fadc789cf604c11bbe0679a1955b 152592 admin optional pacemaker-cli-utils_1.1.18-0ubuntu1.1_s390x.deb 8225428b2def8f5b46977e6c4dc4053f 926732 debug optional pacemaker-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb b35978368dafaa161576a02a08ac3385 75212 debug optional pacemaker-remote-dbgsym_1.1.18-0ubuntu1.1_s390x.ddeb 762271e7a4ed9d5726f3b8a95d946054 34044 admin optional pacemaker-remote_1.1.18-0ubuntu1.1_s390x.deb 62a5dade854878e97f93630b4d76d2bd 19587 admin optional pacemaker_1.1.18-0ubuntu1.1_s390x.buildinfo cb83d34b9f24b0d341fc65881751edf5 283020 admin optional pacemaker_1.1.18-0ubuntu1.1_s390x.deb 55c5db31e827917f7a9d0bd97130a251 693469 raw-translations - pacemaker_1.1.18-0ubuntu1.1_s390x_translations.tar.gz Original-Maintainer: Debian HA Maintainers