SUSE-SU-2020:1072-1

Details

Description of the patch:

This update for pacemaker fixes the following issues:

CVE-2018-16877: Fixed an issue with insufficient local IPC client-server authentication on the client's side (bsc#1131356).
CVE-2018-16878: Fixed a denial of service related to insufficient verification of uncontrolled processes (bsc#1131353).

Affected Packages

libpacemaker3

SUSE Linux Enterprise High Availability Extension 12 SP2

Fixed in:

1.1.15-23.9.1

pacemaker

SUSE Linux Enterprise High Availability Extension 12 SP2

Fixed in:

1.1.15-23.9.1

pacemaker-cli

SUSE Linux Enterprise High Availability Extension 12 SP2

Fixed in:

1.1.15-23.9.1

pacemaker-cts

SUSE Linux Enterprise High Availability Extension 12 SP2

Fixed in:

1.1.15-23.9.1

pacemaker-remote

SUSE Linux Enterprise High Availability Extension 12 SP2

Fixed in:

1.1.15-23.9.1

References