Lucene search

K
oraclelinuxOracleLinuxELSA-2019-1279
HistoryJul 30, 2019 - 12:00 a.m.

pacemaker security and bug fix update

2019-07-3000:00:00
linux.oracle.com
10

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

[2.0.1-4.3]

  • New build with fixed test in gating.yaml
  • Resolves: rhbz#1694557
  • Resolves: rhbz#1695247
  • Resolves: rhbz#1697264
  • Resolves: rhbz#1697265
    [2.0.1-4.2]
  • New build to apply z-stream tag
  • Resolves: rhbz#1694557
  • Resolves: rhbz#1695247
  • Resolves: rhbz#1697264
  • Resolves: rhbz#1697265
    [2.0.1-4.1]
  • Improve clients’ authentication of IPC servers (CVE-2018-16877)
  • Fix use-after-free with potential information disclosure (CVE-2019-3885)
  • Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  • Restore correct behavior when live migration is interrupted
  • Resolves: rhbz#1694557
  • Resolves: rhbz#1695247
  • Resolves: rhbz#1697264
  • Resolves: rhbz#1697265

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N