Security Vulnerabilities fixed in pacemaker RHSA-2019:1278

Description

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): * pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc (CVE-2018-16877) * pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS (CVE-2018-16878) * pacemaker: Information disclosure through use-after-free (CVE-2019-3885) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Applications

pacemaker

CVE References

CVE-2018-16877 CVE-2018-16878 CVE-2019-3885

Other References

https://access.redhat.com/errata/RHSA-2019:1278