SUSE-SU-2021:0781-1 Security update for crmsh

This update for crmsh fixes the following issues: - Update to version 4.3.0+20210305.9db5c9a8: Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lostbsc1181415 Dev: cibconfig: remove related code about detecting crmdiff support --no-verion Fix:...

SUSE-SU-2021:0771-1 Security update for crmsh

This update for crmsh fixes the following issues: - Update to version 3.0.4+git.1614156978.4c1dc46d: Fix: hbreport: walk through hbreport process under haclusterCVE-2020-35459, bsc1179999; CVE-2021-3020, bsc1180571 Fix: bootstrap: setup authorized ssh access for haclusterCVE-2020-35459, bsc117999...

Clusterlabs Crmsh 命令注入漏洞

Clusterlabs Crmsh is a command line software from the Clusterlabs team for high availability cluster management on GNU/Linux systems. A security vulnerability exists in Clusterlabs Crmsh. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the...

SUSE-SU-2021:0722-1 Security update for crmsh

This update for crmsh fixes the following issues: - Update to version 4.1.0+git.1614156984.f4f5e146: Fix: hbreport: walk through hbreport process under haclusterCVE-2020-35459, bsc1179999; CVE-2021-3020, bsc1180571 Fix: bootstrap: setup authorized ssh access for haclusterCVE-2020-35459, bsc117999...

Debian DLA-2533-1 : crmsh security update

It was discovered that there was an in issue in the command-line tool for the Pacemaker High Availability stack. Local attackers were able to execute commands via shell code injection to the 'crm history' command-line tool, potentially allowing escalation of privileges. For Debian 9 'Stretch', th...

Debian: Security Advisory (DLA-2533-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2533-1] crmsh security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2533-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 25, 2021 https://wiki.debian.org/LTS -...

openSUSE Security Update : crmsh (openSUSE-2021-73)

This update for crmsh fixes the following issue : - CVE-2020-35459: Fixed a privilege escalation in hawkinvoke bsc1179999. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

DLA-2533-1 crmsh - security update

Bulletin has no description...

openSUSE Security Update : crmsh (openSUSE-2021-55)

This update for crmsh fixes the following issue : - CVE-2020-35459: Fixed a privilege escalation in hawkinvoke bsc1179999. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Updated crmsh packages fix security vulnerability

The crm configure and hbreport commands failed to sanitize sensitive information by default bsc1163581. An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" when "crm" is run were able to execute commands via shell code injection to the crm histor...

MGASA-2021-0049 Updated crmsh packages fix security vulnerability

The crm configure and hbreport commands failed to sanitize sensitive information by default bsc1163581. An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" when "crm" is run were able to execute commands via shell code injection to the crm histor...

OPENSUSE-SU-2021:0073-1 Security update for crmsh

This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawkinvoke bsc1179999. This update was imported from the SUSE:SLE-15-SP1:Update update project...

Security update for crmsh (important)

openSUSE Security Update: Security update for crmsh Announcement ID: openSUSE-SU-2021:0073-1 Rating: important References: 1179999 Cross-References: CVE-2020-35459 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for crmsh fix...

OPENSUSE-SU-2021:0055-1 Security update for crmsh

This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawkinvoke bsc1179999. This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for crmsh (important)

openSUSE Security Update: Security update for crmsh Announcement ID: openSUSE-SU-2021:0055-1 Rating: important References: 1179999 Cross-References: CVE-2020-35459 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for crmsh fix...

CVE-2020-35459

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" when "crm" is run were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges...

DEBIAN-CVE-2020-35459

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" when "crm" is run were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges...

CVE-2020-35459

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" when "crm" is run were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges...

Code injection

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" when "crm" is run were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges...