SUSE-SU-2016:2974-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2016/suse-su-20162974-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2974-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2016:2974-1
Related
Published
2016-12-02T10:41:08Z
Modified
2016-12-02T10:41:08Z
Summary
Security update for pacemaker
Details

This update for pacemaker fixes the following issues:

  • remote: Allow cluster and remote LRM API versions to diverge (bsc#1009076)
  • libcrmcommon: fix CVE-2016-7035 (improper IPC guarding) (bsc#1007433)
  • sysconfig: minor tweaks (typo, wording)
  • spec: more robust check for systemd being in use
  • spec: defines instead of some globals + error suppression
  • various: issues discovered via valgrind and coverity

  • attrdupdater: fix usage of HAVEATOMIC_ATTRD

  • crmd: cl#5185 - Record pending operations in the CIB before they are performed (bsc#1003565)

  • ClusterMon: fix to avoid matching other process with the same PID
  • mcp: improve comments for sysconfig options
  • remove openssl-devel and libselinux-devel as build dependencies
  • tools: crm_standby --version/--help should work without cluster
  • libpengine: only log startup-fencing warning once
  • pacemaker.service: do not mistakenly suggest killing fenced
  • libcrmcommon: report errors consistently when waiting for data on connection (bsc#986644)
  • remote: Correctly calculate the remaining timeouts when receiving messages (bsc#986644)
  • libfencing: report added node ID correctly
  • crm_mon: Do not call setenv with null value
  • pengine: Do not fence a maintenance node if it shuts down cleanly (bsc#1000743)
  • ping: Avoid temporary files for fping check (bsc#987348)
  • all: clarify licensing and copyrights
  • crmd: Resend the shutdown request if the DC forgets
  • ping: Avoid temp files in fping_check (bsc#987348)
  • crmd: Ensure the R_SHUTDOWN is set whenever we ask the DC to shut us down
  • crmd: clear remote node operation history only when it comes up
  • libcib,libfencing,libtransition: handle memory allocation errors without CRM_CHECK()
  • tools: make crm_mon XML schema handle resources with multiple active
  • pengine: set OCFRESKEYCRMmetanotifyactive* for multistate resources
  • pengine: avoid null dereference in new same-node ordering option
  • lrmd,libcluster: ensure ghashtable_foreach() is never passed a null table
  • crmd: don't log warning if abortunlessdown() can't find down event
  • lib: Correction of the deletion of the notice registration.
  • stonithd: Correction of the wrong connection process name.
  • crmd: Keep a state of LRMD in the DC node latest.
  • pengine: avoid transition loop for start-then-stop + unfencing

  • libpengine: allow peordersame_node option for constraints

  • cts: Restart systemd-journald with 'systemctl restart systemd-journald.socket' (bsc#995365)

  • libcrmcommon: properly handle XML comments when comparing v2 patchset diffs
  • crmd: don't abort transitions for CIB comment changes
  • libcrmcommon: log XML comments correctly

  • libcrmcommon: remove extraneous format specifier from log message

  • remote: cl#5269 - Notify other clients of a new connection only if the handshake has completed (bsc#967388, bsc#1002767, CVE-2016-7797)

References

Affected packages

SUSE:Linux Enterprise High Availability Extension 12 SP1 / pacemaker

Package

Name
pacemaker
Purl
pkg:rpm/suse/pacemaker&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.13-20.1

Ecosystem specific 

{
    "binaries": [
        {
            "pacemaker-cli": "1.1.13-20.1",
            "libpacemaker3": "1.1.13-20.1",
            "pacemaker-cts": "1.1.13-20.1",
            "pacemaker": "1.1.13-20.1",
            "pacemaker-remote": "1.1.13-20.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP1 / pacemaker

Package

Name
pacemaker
Purl
pkg:rpm/suse/pacemaker&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.13-20.1

Ecosystem specific 

{
    "binaries": [
        {
            "pacemaker-cts": "1.1.13-20.1",
            "libpacemaker-devel": "1.1.13-20.1"
        }
    ]
}