Ubuntu
pacemaker package

pacemaker 1.1.14-2ubuntu1.6 source package in Ubuntu

Changelog

pacemaker (1.1.14-2ubuntu1.6) xenial-security; urgency=medium

  * SECURITY UPDATE: DoS and local privilege escalation in client-server
    authentication
    - debian/patches/CVE-2018-1687x-1.patch: make crm_pid_active more
      precise as to when detections fail in include/crm_internal.h,
      lib/common/utils.c.
    - debian/patches/CVE-2018-1687x-2.patch: add new helpers to allow IPC
      client side to authenticate the server in configure.ac,
      include/crm/common/Makefile.am, include/crm/common/ipc.h,
      include/crm/common/ipc_internal.h, lib/common/ipc.c.
    - debian/patches/CVE-2018-1687x-3.patch: pacemakerd to trust
      pre-existing processes via new checks instead in mcp/pacemaker.c.
    - debian/patches/CVE-2018-1687x-4.patch: other daemons to authenticate
      IPC servers of fellow processes in lib/cluster/corosync.c,
      lib/cluster/cpg.c, lib/common/ipc.c, mcp/corosync.c.
    - debian/patches/CVE-2018-1687x-5.patch: CPG users to be careful about
      now-more-probable rival processes in attrd/main.c, cib/main.c,
      crmd/main.c, fencing/main.c, lib/cluster/cpg.c.
    - debian/patches/CVE-2018-1687x-6.patch: fix possible NULL pointer
      dereference in crmd/control.c.
    - debian/libcrmcommon3.symbols: added new symbols.
    - CVE-2018-16877
    - CVE-2018-16878

 -- Marc Deslauriers <email address hidden>  Thu, 18 Apr 2019 08:30:39 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
pacemaker_1.1.14.orig.tar.gz 4.5 MiB 2f73043a5de5e66a47462d37cd68c4c6861f71a03c0ea02eb4ae2b1a550cd7b0
pacemaker_1.1.14-2ubuntu1.6.debian.tar.xz 62.1 KiB 97977db8299b302e9c8119c334856e619016bf66b2dcc61499f2d1f7c4dc29c2
pacemaker_1.1.14-2ubuntu1.6.dsc 4.0 KiB cb2d465b9fbdb81b2b6bb5d1ac229585033e55588e39bb86237e2a8a7aa6d793

View changes file

Binary packages built by this source

libcib-dev: cluster resource manager CIB library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the Cluster Information Base library.

libcib4: cluster resource manager CIB library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Cluster Information Base library.

libcib4-dbgsym: debug symbols for package libcib4

 .
 This package contains the Cluster Information Base library.

libcrmcluster-dev: cluster resource manager cluster library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the cluster library.

libcrmcluster4: cluster resource manager cluster library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the cluster library.

libcrmcluster4-dbgsym: debug symbols for package libcrmcluster4

 .
 This package contains the cluster library.

libcrmcommon-dev: cluster resource manager common library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the common library.

libcrmcommon3: cluster resource manager common library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the common library.

libcrmcommon3-dbgsym: debug symbols for package libcrmcommon3

 .
 This package contains the common library.

libcrmservice-dev: cluster resource manager service library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the service library.

libcrmservice3: cluster resource manager service library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the service library.

libcrmservice3-dbgsym: debug symbols for package libcrmservice3

 .
 This package contains the service library.

liblrmd-dev: cluster resource manager LRMD library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the Local Resource Manager Daemon
 library.

liblrmd1: cluster resource manager LRMD library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Local Resource Manager Daemon library.

liblrmd1-dbgsym: debug symbols for package liblrmd1

 .
 This package contains the Local Resource Manager Daemon library.

libpe-rules2: cluster resource manager Policy Engine rules library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Policy Engine rules library.

libpe-rules2-dbgsym: debug symbols for package libpe-rules2

 .
 This package contains the Policy Engine rules library.

libpe-status10: cluster resource manager Policy Engine status library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Policy Engine status library.

libpe-status10-dbgsym: debug symbols for package libpe-status10

 .
 This package contains the Policy Engine status library.

libpengine-dev: cluster resource manager Policy Engine library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the Policy Engine library.

libpengine10: cluster resource manager Policy Engine library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Policy Engine library.

libpengine10-dbgsym: debug symbols for package libpengine10

 .
 This package contains the Policy Engine library.

libstonithd-dev: cluster resource manager STONITH daemon library development

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the headers and other necessary files to build
 applications or libraries that use the STONITH daemon library.

libstonithd2: cluster resource manager STONITH daemon library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the STONITH daemon library.

libstonithd2-dbgsym: debug symbols for package libstonithd2

 .
 This package contains the STONITH daemon library.

libtransitioner2: cluster resource manager transitioner library

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the transitioner library.

libtransitioner2-dbgsym: debug symbols for package libtransitioner2

 .
 This package contains the transitioner library.

pacemaker: cluster resource manager

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Pacemaker daemons directly interacting with
 the cluster stack.

pacemaker-cli-utils: cluster resource manager command line utilities

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains those command line utilities of the Pacemaker
 cluster manager which work on remote nodes as well.

pacemaker-cli-utils-dbgsym: debug symbols for package pacemaker-cli-utils

 .
 This package contains those command line utilities of the Pacemaker
 cluster manager which work on remote nodes as well.

pacemaker-common: cluster resource manager common files

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains common infrastructure and data files for the
 Pacemaker daemons and utilities.

pacemaker-dbgsym: debug symbols for package pacemaker

 .
 This package contains the Pacemaker daemons directly interacting with
 the cluster stack.

pacemaker-doc: cluster resource manager HTML documentation

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains
  * the Pacemaker API documentation generated by Doxygen,
  * the Clusters from Scratch book,
  * the Pacemaker Explained book, and
  * the Pacemaker Remote book.

pacemaker-remote: cluster resource manager proxy daemon for remote nodes

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains the Pacemaker proxy daemon, which simulates cluster
 services on a node not running the cluster stack. Such "remote" nodes can
 run resources but don't participate in the quorum. This package is
 mutually exclusive with Pacemaker proper.

pacemaker-remote-dbgsym: debug symbols for package pacemaker-remote

 .
 This package contains the Pacemaker proxy daemon, which simulates cluster
 services on a node not running the cluster stack. Such "remote" nodes can
 run resources but don't participate in the quorum. This package is
 mutually exclusive with Pacemaker proper.

pacemaker-resource-agents: cluster resource manager general resource agents

 At its core, Pacemaker is a distributed finite state machine capable of
 co-ordinating the startup and recovery of inter-related services across
 a set of machines.
 .
 Pacemaker understands many different resource types (OCF, SYSV, systemd)
 and can accurately model the relationships between them (colocation,
 ordering).
 .
 It can even use technology such as Docker to automatically isolate the
 resources managed by the cluster.
 .
 This package contains Pacemaker resource agents not requiring access
 to the cluster stack, thus also usable by the remote daemon.