CVE-2018-16877

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.

The updated packages fix security vulnerabilities:

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs. (CVE-2019-3885)

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation. (CVE-2018-16877)

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS. (CVE-2018-16878)

This update for pacemaker fixes the following issues:

Security issues fixed:

• CVE-2019-3885: Fixed an information disclosure in log output. (bsc#1131357)
• CVE-2018-16877: Fixed a local privilege escalation through insufficient IPC client-server authentication. (bsc#1131356)
• CVE-2018-16878: Fixed a denial of service through insufficient verification inflicted preference of uncontrolled processes. (bsc#1131353)

Non-security issue fixed:

• crmd: delete resource from lrmd when appropriate to avoid timeouts with crmsh (bsc#1117381).

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the libpacemaker-devel-2.1.0+20210816.c6a4f6e6c-1.1 package on the GA media of openSUSE Tumbleweed.

This update for pacemaker fixes the following issues:

Security issues fixed:

• CVE-2019-3885: Fixed an information disclosure in log output. (bsc#1131357)
• CVE-2018-16877: Fixed a local privilege escalation through insufficient IPC client-server authentication. (bsc#1131356)
• CVE-2018-16878: Fixed a denial of service through insufficient verification inflicted preference of uncontrolled processes. (bsc#1131353)

Non-security issue fixed:

• scheduler: Respect the order of constraints when relevant resources are being probed. (bsc#1117934, bsc#1128374)

This update for pacemaker fixes the following issues:

Security issues fixed:

• CVE-2018-16877: Fixed a local privilege escalation through insufficient IPC client-server authentication. (bsc#1131356)
• CVE-2018-16878: Fixed a denial of service through insufficient verification inflicted preference of uncontrolled processes. (bsc#1131353)

This update for pacemaker fixes the following issues:

Security issues fixed:

• CVE-2019-3885: Fixed an information disclosure in log output. (bsc#1131357)
• CVE-2018-16877: Fixed a local privilege escalation through insufficient IPC client-server authentication. (bsc#1131356)
• CVE-2018-16878: Fixed a denial of service through insufficient verification inflicted preference of uncontrolled processes. (bsc#1131353)

Non-security issue fixed:

• crmd: delete resource from lrmd when appropriate to avoid timeouts with crmsh (bsc#1117381).

This update for pacemaker fixes the following issues:

Security issues fixed:

• CVE-2018-16877: Fixed insufficient local IPC client-server authentication on the client's side. (bsc#1131356)
• CVE-2018-16878: Fixed insufficient verification inflicted preference of uncontrolled processes (bsc#1131353)

Other issues fixed:

• stonith_admin --help: specify the usage of --cleanup (bsc#1135317)
• scheduler: wait for probe actions to complete to prevent unnecessary restart/re-promote of dependent resources (bsc#1130122, bsc#1032511)
• controller: confirm cancel of failed monitors (bsc#1133866)
• controller: improve failed recurring action messages (bsc#1133866)
• controller: directly acknowledge unrecordable operation results (bsc#1133866)
• controller: be more tolerant of malformed executor events (bsc#1133866)
• libcrmcommon: return error when applying XML diffs containing unknown operations (bsc#1127716)
• libcrmcommon: avoid possible use-of-NULL when applying XML diffs (bsc#1127716)
• libcrmcommon: correctly apply XML diffs with multiple move/create changes (bsc#1127716)
• libcrmcommon: return proper code if testing pid is denied (bsc#1131353, bsc#1131356)
• libcrmcommon: avoid use-of-NULL when checking whether process is active (bsc#1131353, bsc#1131356)
• tools: run main loop for crm_resource clean-up with resource (bsc#1140519)
• contoller,scheduler: guard hash table deletes (bsc#1136712)

This update for pacemaker fixes the following issues:

• CVE-2018-16877: Fixed an issue with insufficient local IPC client-server authentication on the client's side (bsc#1131356).
• CVE-2018-16878: Fixed a denial of service related to insufficient verification of uncontrolled processes (bsc#1131353).

Jan Pokorný discovered that Pacemaker incorrectly handled client-server authentication. A local attacker could possibly use this issue to escalate privileges. (CVE-2018-16877)

Jan Pokorný discovered that Pacemaker incorrectly handled certain verifications. A local attacker could possibly use this issue to cause a denial of service. (CVE-2018-16878)

Jan Pokorný discovered that Pacemaker incorrectly handled certain memory operations. A local attacker could possibly use this issue to obtain sensitive information in log outputs. This issue only applied to Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. (CVE-2019-3885)