pacemaker 1.1.18-0ubuntu1.1 source package in Ubuntu

Changelog

pacemaker (1.1.18-0ubuntu1.1) bionic-security; urgency=medium

  * SECURITY UPDATE: DoS and local privilege escalation in client-server
    authentication
    - debian/patches/CVE-2018-1687x-1.patch: make crm_pid_active more
      precise as to when detections fail in include/crm_internal.h,
      lib/common/utils.c.
    - debian/patches/CVE-2018-1687x-2.patch: add new helpers to allow IPC
      client side to authenticate the server in configure.ac,
      include/crm/common/Makefile.am, include/crm/common/ipc.h,
      include/crm/common/ipc_internal.h, lib/common/ipc.c.
    - debian/patches/CVE-2018-1687x-3.patch: pacemakerd to trust
      pre-existing processes via new checks instead in mcp/pacemaker.c.
    - debian/patches/CVE-2018-1687x-4.patch: other daemons to authenticate
      IPC servers of fellow processes in lib/cluster/corosync.c,
      lib/cluster/cpg.c, lib/common/ipc.c, mcp/corosync.c.
    - debian/patches/CVE-2018-1687x-5.patch: CPG users to be careful about
      now-more-probable rival processes in attrd/main.c, cib/main.c,
      crmd/main.c, fencing/main.c, lib/cluster/cpg.c.
    - debian/patches/CVE-2018-1687x-6.patch: fix possible NULL pointer
      dereference in crmd/control.c.
    - debian/libcrmcommon3.symbols: added new symbols.
    - CVE-2018-16877
    - CVE-2018-16878
  * SECURITY UPDATE: information disclosure via use-after-free
    - debian/patches/CVE-2019-3885.patch: fix alert handling in
      lib/services/services.c, lib/services/services_linux.c.
    - CVE-2019-3885

 -- Marc Deslauriers <email address hidden>  Thu, 18 Apr 2019 07:56:54 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
pacemaker_1.1.18.orig.tar.gz 5.1 MiB a71921c1e2a93c5bed6199fb41464a1cff887be515f4a0ffbc2c92bc98d233af
pacemaker_1.1.18-0ubuntu1.1.debian.tar.xz 65.4 KiB 61fd1a0a0a50ac18cd3c080b96c3324f217ee5baccd140f879b5dcaf706c6bd9
pacemaker_1.1.18-0ubuntu1.1.dsc 3.9 KiB 470d1ee8acda790747ec1ddfd4547e3c967c22f7cbe6868f8c81d608fdc3dd13

View changes file

Binary packages built by this source

libcib-dev: cluster resource manager CIB library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the Cluster Information Base library.

libcib4: cluster resource manager CIB library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Cluster Information Base library.

libcib4-dbgsym: debug symbols for libcib4
libcrmcluster-dev: cluster resource manager cluster library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the cluster library.

libcrmcluster4: cluster resource manager cluster library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the cluster library.

libcrmcluster4-dbgsym: debug symbols for libcrmcluster4
libcrmcommon-dev: cluster resource manager common library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the common library.

libcrmcommon3: cluster resource manager common library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the common library.

libcrmcommon3-dbgsym: debug symbols for libcrmcommon3
libcrmservice-dev: cluster resource manager service library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the service library.

libcrmservice3: cluster resource manager service library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the service library.

libcrmservice3-dbgsym: debug symbols for libcrmservice3
liblrmd-dev: cluster resource manager LRMD library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the Local Resource Manager Daemon
 library.

liblrmd1: cluster resource manager LRMD library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Local Resource Manager Daemon library.

liblrmd1-dbgsym: debug symbols for liblrmd1
libpe-rules2: cluster resource manager Policy Engine rules library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Policy Engine rules library.

libpe-rules2-dbgsym: debug symbols for libpe-rules2
libpe-status10: cluster resource manager Policy Engine status library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Policy Engine status library.

libpe-status10-dbgsym: debug symbols for libpe-status10
libpengine-dev: cluster resource manager Policy Engine library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the Policy Engine library.

libpengine10: cluster resource manager Policy Engine library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Policy Engine library.

libpengine10-dbgsym: debug symbols for libpengine10
libstonithd-dev: cluster resource manager STONITH daemon library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the STONITH daemon library.

libstonithd2: cluster resource manager STONITH daemon library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the STONITH daemon library.

libstonithd2-dbgsym: debug symbols for libstonithd2
libtransitioner2: cluster resource manager transitioner library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the transitioner library.

libtransitioner2-dbgsym: debug symbols for libtransitioner2
pacemaker: cluster resource manager

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Pacemaker daemons directly interacting with
 the cluster stack.

pacemaker-cli-utils: cluster resource manager command line utilities

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains those command line utilities of the Pacemaker
 cluster manager which work on remote nodes as well.

pacemaker-cli-utils-dbgsym: debug symbols for pacemaker-cli-utils
pacemaker-common: cluster resource manager common files

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains common infrastructure and data files for the
 Pacemaker daemons and utilities.

pacemaker-dbgsym: debug symbols for pacemaker
pacemaker-doc: cluster resource manager HTML documentation

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains
  * the Pacemaker API documentation generated by Doxygen,
  * the Clusters from Scratch book,
  * the Pacemaker Development book,
  * the Pacemaker Explained book and
  * the Pacemaker Remote book.

pacemaker-remote: cluster resource manager proxy daemon for remote nodes

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Pacemaker proxy daemon, which simulates cluster
 services on a node not running the cluster stack. Such "remote" nodes can
 run resources but don't participate in the quorum. This package is
 mutually exclusive with Pacemaker proper.

pacemaker-remote-dbgsym: debug symbols for pacemaker-remote
pacemaker-resource-agents: cluster resource manager general resource agents

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains Pacemaker resource agents not requiring access
 to the cluster stack, thus also usable by the remote daemon.