Format: 1.8 Date: Thu, 18 Apr 2019 07:32:00 -0400 Source: pacemaker Binary: libcib-dev libcib4 libcrmcluster-dev libcrmcluster4 libcrmcommon-dev libcrmcommon3 libcrmservice-dev libcrmservice3 liblrmd-dev liblrmd1 libpe-rules2 libpe-status10 libpengine-dev libpengine10 libstonithd-dev libstonithd2 libtransitioner2 pacemaker pacemaker-cli-utils pacemaker-remote Architecture: armhf armhf_translations Version: 1.1.18-2ubuntu1.19.04.1 Distribution: disco Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcib-dev - cluster resource manager CIB library development libcib4 - cluster resource manager CIB library libcrmcluster-dev - cluster resource manager cluster library development libcrmcluster4 - cluster resource manager cluster library libcrmcommon-dev - cluster resource manager common library development libcrmcommon3 - cluster resource manager common library libcrmservice-dev - cluster resource manager service library development libcrmservice3 - cluster resource manager service library liblrmd-dev - cluster resource manager LRMD library development liblrmd1 - cluster resource manager LRMD library libpe-rules2 - cluster resource manager Policy Engine rules library libpe-status10 - cluster resource manager Policy Engine status library libpengine-dev - cluster resource manager Policy Engine library development libpengine10 - cluster resource manager Policy Engine library libstonithd-dev - cluster resource manager STONITH daemon library development libstonithd2 - cluster resource manager STONITH daemon library libtransitioner2 - cluster resource manager transitioner library pacemaker - cluster resource manager pacemaker-cli-utils - cluster resource manager command line utilities pacemaker-remote - cluster resource manager proxy daemon for remote nodes Changes: pacemaker (1.1.18-2ubuntu1.19.04.1) disco-security; urgency=medium . * SECURITY UPDATE: DoS and local privilege escalation in client-server authentication - debian/patches/CVE-2018-1687x-1.patch: make crm_pid_active more precise as to when detections fail in include/crm_internal.h, lib/common/utils.c. - debian/patches/CVE-2018-1687x-2.patch: add new helpers to allow IPC client side to authenticate the server in configure.ac, include/crm/common/Makefile.am, include/crm/common/ipc.h, include/crm/common/ipc_internal.h, lib/common/ipc.c. - debian/patches/CVE-2018-1687x-3.patch: pacemakerd to trust pre-existing processes via new checks instead in mcp/pacemaker.c. - debian/patches/CVE-2018-1687x-4.patch: other daemons to authenticate IPC servers of fellow processes in lib/cluster/corosync.c, lib/cluster/cpg.c, lib/common/ipc.c, mcp/corosync.c. - debian/patches/CVE-2018-1687x-5.patch: CPG users to be careful about now-more-probable rival processes in attrd/main.c, cib/main.c, crmd/main.c, fencing/main.c, lib/cluster/cpg.c. - debian/patches/CVE-2018-1687x-6.patch: fix possible NULL pointer dereference in crmd/control.c. - debian/libcrmcommon3.symbols: added new symbols. - CVE-2018-16877 - CVE-2018-16878 * SECURITY UPDATE: information disclosure via use-after-free - debian/patches/CVE-2019-3885.patch: fix alert handling in lib/services/services.c, lib/services/services_linux.c. - CVE-2019-3885 Checksums-Sha1: 888608d9312b13fefdc9776b6a573de65275ff23 11356 libcib-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 6be148ac52bfd7b690a7672bbf0be432d7976615 127352 libcib4-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb ccedc9cb04cb1dbcb4f9c3ea4081fe6bee40e94b 47944 libcib4_1.1.18-2ubuntu1.19.04.1_armhf.deb 5dd5e5a1512637dde1fa23f6e63696ff9c234efb 11596 libcrmcluster-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 9e999f33dc92c1e9a31d349eb9267fd50149b76a 94856 libcrmcluster4-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 8b7243108d82c3ea4cdb563ea0d95c615d9270b9 40272 libcrmcluster4_1.1.18-2ubuntu1.19.04.1_armhf.deb 62069b14d5d1baeebe8f727d80b83b4b8411f809 30120 libcrmcommon-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 700ac63007ccc34a8a2b8740e6cfb8397c1b0cef 422296 libcrmcommon3-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 279c0bc96f10ba2bb5d7d3cc0c1987d8f38b6759 137024 libcrmcommon3_1.1.18-2ubuntu1.19.04.1_armhf.deb 99856a3d0ad90918c4973a7ef26e3a7d7e4c2a4d 13008 libcrmservice-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb ce13055370e44672934f54eb9751cc287e688fe8 81244 libcrmservice3-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb f2a4756a54acb97c9023b74a1cf4c4f28be58b5c 33992 libcrmservice3_1.1.18-2ubuntu1.19.04.1_armhf.deb 6b11e6d55389dc19ecdea84620cfad53a8275e2a 13884 liblrmd-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb c0901921c1cbfe1692b86f51d380ed62974f7c9b 67744 liblrmd1-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 5e3d5c3694d82b3210dbaecca97147841ab13247 26588 liblrmd1_1.1.18-2ubuntu1.19.04.1_armhf.deb e8e3fcd2eb52bd3e47bb208189ea5a2bb71e8756 50192 libpe-rules2-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb becdfdf1681de412afd852f3d2558f2d6ff67aaa 25296 libpe-rules2_1.1.18-2ubuntu1.19.04.1_armhf.deb 380c5e251dfbd16906dcf84f81de360ea3b56d00 355656 libpe-status10-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 1ff67efd8842d670c44419e8bbd91bd91340fc70 115700 libpe-status10_1.1.18-2ubuntu1.19.04.1_armhf.deb 09784f88ba3aee15257e0ed9d4a61a71371acf80 15980 libpengine-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 5fbe145457a12bff331bab819513f7cec53d2bd4 412112 libpengine10-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb bffb8aaf515ba0515a2405d48b5aa0bf74cc5934 140876 libpengine10_1.1.18-2ubuntu1.19.04.1_armhf.deb 364430c8cf01087552c9a14098a5b12909f8ae98 12488 libstonithd-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb b3fb635c208f1333e7d54335dd72482eed489613 63952 libstonithd2-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 3cfe1655ef4af710a7fa078fd1e96f2002c2e60e 31148 libstonithd2_1.1.18-2ubuntu1.19.04.1_armhf.deb e64e08bda0e66c3980b6a4b31aa181b813f16fe7 37148 libtransitioner2-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 8952cfe7737ae8bbbc7e1ba9b034b076ecfa5044 20488 libtransitioner2_1.1.18-2ubuntu1.19.04.1_armhf.deb b16b1ee516c910702ce10f5b0664a67dfe1a7c54 445772 pacemaker-cli-utils-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb ec96c0ae2b5d60d0009a733d1a25af78c788fc05 156416 pacemaker-cli-utils_1.1.18-2ubuntu1.19.04.1_armhf.deb bc390c6b1ad9e85d322392d08fb1dfaf312ae4a1 995668 pacemaker-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 6e6a3eb9256744e82543f3390c254fad1fc575aa 80236 pacemaker-remote-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 0a35f71ff0a515c14fb87781f82016f9182f8430 33520 pacemaker-remote_1.1.18-2ubuntu1.19.04.1_armhf.deb ad39b29eadb8849a4625f90805d4dfdce25d03d9 19410 pacemaker_1.1.18-2ubuntu1.19.04.1_armhf.buildinfo bba5e7cab75d9a982b5e88ea4011a9dae257f0a8 304596 pacemaker_1.1.18-2ubuntu1.19.04.1_armhf.deb 348e56c84259767dad315d24ae516ded95090c9e 694067 pacemaker_1.1.18-2ubuntu1.19.04.1_armhf_translations.tar.gz Checksums-Sha256: 73789592188da14f5273eac4df5d164e5e9111403c88ba3f948ecfd0e7711210 11356 libcib-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb aeb8ea4a73df16d6c59cd23a7a354c3e3ac4f63cf2dcb3473857facb03c13cf0 127352 libcib4-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb f412bb6d0c1d98933f972157100be1161b99163a286ac626f3d02710cebe6f58 47944 libcib4_1.1.18-2ubuntu1.19.04.1_armhf.deb 6347f91706cc445bd9fde477e07f4552f61e834139139668796d78cca0bd2f10 11596 libcrmcluster-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 38e2225179cb05d4e411660b475c4e3c899b9d5369a95e84c581269e1090b55b 94856 libcrmcluster4-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 3257b909d63459b4be5ae58c4b18c94f0e311c9f43f9f7023a5145fc2db01d19 40272 libcrmcluster4_1.1.18-2ubuntu1.19.04.1_armhf.deb 3a4aa0520d1f214724ba0beac46a60f6c0f772e6e13a484ae6f84b2b9c2c1d35 30120 libcrmcommon-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 4951edfe7e67a66af8dd9f8ad47e57c044cb8e208ce9400502d1f794391f13fe 422296 libcrmcommon3-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb aca5c0604c5992aecb68fef65a0520fde2c22eb1df10cb3b37d95faf01f4a163 137024 libcrmcommon3_1.1.18-2ubuntu1.19.04.1_armhf.deb fdb9edbaff6b1cf0080cb01c33a848ee2f2ac090e6a9a631d8be570197b29356 13008 libcrmservice-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb c86d257f5bf312c8c399f7cf954269689ce7fa53e5f35eaa8f98c4816a89e784 81244 libcrmservice3-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 23b31b3dd75c64a5af5b7eb7c5a6189725c37245343984676d83e32448725edb 33992 libcrmservice3_1.1.18-2ubuntu1.19.04.1_armhf.deb ba53011c63e3fc1bd61e396dc97d5a4c3c1d26afd5a5ee15d4846acb2d2acff4 13884 liblrmd-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb e495cdf325bda58b94e1008f054c595271b5f342d30b2c3e8d563e0817aab640 67744 liblrmd1-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb ce25dcfe1c8955412a02a93e24e26506031e0bceef64d286b28ff3c3c5be8716 26588 liblrmd1_1.1.18-2ubuntu1.19.04.1_armhf.deb f8bf3781a4ac8cd7e16a955b6e72c9e21e22abe6c7f4fe011954dee4ff3005f1 50192 libpe-rules2-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb e828a8e755d143c0a28419455d559e9f2891fffd3c74c843c0739099c7f32593 25296 libpe-rules2_1.1.18-2ubuntu1.19.04.1_armhf.deb 54a2fb7123f2e22302c1164d821302941f91decde1cfac7e2552087e40e1efc8 355656 libpe-status10-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb fc48cedf2d5db7705e97bc6ba595d6a6374c48b9840ad936b48cfc607bccd681 115700 libpe-status10_1.1.18-2ubuntu1.19.04.1_armhf.deb ab5659f87101a2c76dd197897779da44d87182bf60496e67ed4341bc66e374ec 15980 libpengine-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 1bf67c94025a738a02824e9a47ffa5c22b86f3d3344b8fc0de5a4a3b05b4b216 412112 libpengine10-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 03aba29c8f6fe56c7eff9a9f725a7dbb102e1efba425660f8aaec052d835dd88 140876 libpengine10_1.1.18-2ubuntu1.19.04.1_armhf.deb c1752a7c729aed45b9268a852a38d9d31f03bae73d6a3c0299fb9c4fbac0244c 12488 libstonithd-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb f18c6bd28a10489a0ea333ce96157a1c2d02038578ac24910f911f9d25f79c20 63952 libstonithd2-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb ab2b15782f74ddbe5912b1dd8d548ec28c2e8d0130db02bd2da892846a7bfcfc 31148 libstonithd2_1.1.18-2ubuntu1.19.04.1_armhf.deb a08b4b215baf3fa931f4819937b600377adcba362c9aa3240c6b2087717e0ece 37148 libtransitioner2-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb e75fe93b1755865d707cd9319e3ed84d6e071bdc94ff481d406abf334c8c9914 20488 libtransitioner2_1.1.18-2ubuntu1.19.04.1_armhf.deb 46c8b1c23951488e047705b6edb2cdea617742d4c6cbdd5c2abd19e7031171b0 445772 pacemaker-cli-utils-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 724027f6d8313d157d888f3235a39e30d2a67cc938381e00c234ef99f7fddb8a 156416 pacemaker-cli-utils_1.1.18-2ubuntu1.19.04.1_armhf.deb 476305a3c245a9967a3bbe1d7f5a9cbea25adfa7323a9dd690ad9e9f9749fcfb 995668 pacemaker-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 78c7067664b740a90d404015ba7d7d9ec53a07a65c6cc9ac0ad4ae7305931af4 80236 pacemaker-remote-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 984b13c0143af9e16c16745a03b8932dbb6578d39553c8778aa990338f6bfdda 33520 pacemaker-remote_1.1.18-2ubuntu1.19.04.1_armhf.deb ca385998e419973561c341cd78fa34983e2cf4ee3adc9f6aba2669c3546fc7df 19410 pacemaker_1.1.18-2ubuntu1.19.04.1_armhf.buildinfo db0745eb089f0c383823e91f3947c7425233d3c0937f70acf167752c499314c4 304596 pacemaker_1.1.18-2ubuntu1.19.04.1_armhf.deb 2044bc5e08307b8245f44202bea9548dae7e8165eb17c72b96c9d27fa5fec7f1 694067 pacemaker_1.1.18-2ubuntu1.19.04.1_armhf_translations.tar.gz Files: 7dc8f0fc76585cdb5116fd90d508c0d8 11356 libdevel optional libcib-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 3f92b1dec7a3b734befe7a49ea05a194 127352 debug optional libcib4-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb abe9683a49e82edf5cf4ffe7709bc450 47944 libs optional libcib4_1.1.18-2ubuntu1.19.04.1_armhf.deb 6b823616f0da4d43e6c8a1cbc53aacf7 11596 libdevel optional libcrmcluster-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 3adc8fbe92e417516de1a74ae58a18f7 94856 debug optional libcrmcluster4-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb e2e4fdc2b9a649fda54819abf96c7084 40272 libs optional libcrmcluster4_1.1.18-2ubuntu1.19.04.1_armhf.deb 93aa8fcc8b42dd929c687b0437250ba5 30120 libdevel optional libcrmcommon-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb c49fd073d222a496ddeac5523ddf7da6 422296 debug optional libcrmcommon3-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 010082e6b92a1b80833eda203eb675ff 137024 libs optional libcrmcommon3_1.1.18-2ubuntu1.19.04.1_armhf.deb ce32b511be6f4a52724f96540d04998f 13008 libdevel optional libcrmservice-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb f2c8146f6b2af47fd5f112115d6c72bb 81244 debug optional libcrmservice3-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb d4a63153619aa6ae6500bbfcfc40bc19 33992 libs optional libcrmservice3_1.1.18-2ubuntu1.19.04.1_armhf.deb 5f6f4d3a92ccd00814ed5fcc4f72abf1 13884 libdevel optional liblrmd-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 5b8d2ebcf2af7f612c8c0b91d767418d 67744 debug optional liblrmd1-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb dd8bcef74f41c09ef223f2c1ac5e001c 26588 libs optional liblrmd1_1.1.18-2ubuntu1.19.04.1_armhf.deb d0c1f0ca977c1b32f248acb513f4d1c7 50192 debug optional libpe-rules2-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 12b898dca87f4cbbb6ed6a63a0380d7c 25296 libs optional libpe-rules2_1.1.18-2ubuntu1.19.04.1_armhf.deb cd3d4efc3d704ce678c12ec792d577ae 355656 debug optional libpe-status10-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 0dfa8645b857395c8b1785bebb0b300e 115700 libs optional libpe-status10_1.1.18-2ubuntu1.19.04.1_armhf.deb 9ea97449d18d03fac36f729b5ac59612 15980 libdevel optional libpengine-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 28fc8068feaee4783005c5c7bb8cd602 412112 debug optional libpengine10-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb fd7510bb0f2f1539838f2884570f92b4 140876 libs optional libpengine10_1.1.18-2ubuntu1.19.04.1_armhf.deb da73339564787b35b2b71b9f538cc7f0 12488 libdevel optional libstonithd-dev_1.1.18-2ubuntu1.19.04.1_armhf.deb 9899bb2fdf621e4b4d61d0e41a219e4e 63952 debug optional libstonithd2-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 0fd4960cc612df3d1d2337f65c844b2c 31148 libs optional libstonithd2_1.1.18-2ubuntu1.19.04.1_armhf.deb 6c9f8a4528ba37d1beaccb151805bf7f 37148 debug optional libtransitioner2-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 6134bea9ce46b6807ead1fbb462ece84 20488 libs optional libtransitioner2_1.1.18-2ubuntu1.19.04.1_armhf.deb 506b6b57fbb95a759ef0b5c6da8cce95 445772 debug optional pacemaker-cli-utils-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 93d116097e43fde7b7ac99be35a5c298 156416 admin optional pacemaker-cli-utils_1.1.18-2ubuntu1.19.04.1_armhf.deb 162c1609bf9c9384e7d7cfae323b487c 995668 debug optional pacemaker-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb 2bcd15f998d29491001f2465fa3fbb66 80236 debug optional pacemaker-remote-dbgsym_1.1.18-2ubuntu1.19.04.1_armhf.ddeb f48f0a9900170620abcbeff59cbe8254 33520 admin optional pacemaker-remote_1.1.18-2ubuntu1.19.04.1_armhf.deb 768a4aee7c94f53eea379970d89350ea 19410 admin optional pacemaker_1.1.18-2ubuntu1.19.04.1_armhf.buildinfo b308c03bce891fd4f31807750b1ae210 304596 admin optional pacemaker_1.1.18-2ubuntu1.19.04.1_armhf.deb fc15cf0b076f20dcd777769d9e58dff9 694067 raw-translations - pacemaker_1.1.18-2ubuntu1.19.04.1_armhf_translations.tar.gz Original-Maintainer: Debian HA Maintainers