RHSA-2020:5423: Moderate: pacemaker security update
Published Dec 15, 2020
·Updated
The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): pacemaker: ACL restrictions bypass (CVE-2020-25654) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
52 affected componentsFixes available
redhat/pacemaker<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cli-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cli-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cluster-libs<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cluster-libs<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cluster-libs-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cluster-libs-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-debugsource<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-debugsource<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-libs<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-libs<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-libs-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-libs-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-remote-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-remote-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-schemas<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cli<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cts<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-doc<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-libs-devel<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-libs-devel<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-nagios-plugins-metadata<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-remote<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cli-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cluster-libs<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cluster-libs-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-debugsource<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-libs<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-libs-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-remote-debuginfo<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cli<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-libs-devel<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-remote<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-cli-debuginfo<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-cluster-libs<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-cluster-libs-debuginfo<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-debuginfo<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-debugsource<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-libs<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-libs-debuginfo<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-remote-debuginfo<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-cli<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker-remote<2.0.3-5.el8_2.3
2.0.3-5.el8_2.3
redhat/pacemaker<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-cli<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-libs-devel<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
redhat/pacemaker-remote<2.0.3-5.el8_2.3.aa
2.0.3-5.el8_2.3.aa
Remediation
Event History
Dec 15, 2020
Advisory Published
via Red Hat·12:00 AM
Frequently Asked Questions
1
What is the severity of RHSA-2020:5423?
The severity of RHSA-2020:5423 is classified as moderate.
2
What vulnerabilities are addressed by RHSA-2020:5423?
RHSA-2020:5423 addresses an ACL restrictions bypass vulnerability identified as CVE-2020-25654.
3
How do I fix RHSA-2020:5423?
To fix RHSA-2020:5423, update the affected packages to version 2.0.3-5.el8_2.3 or higher.
4
Which packages are affected by RHSA-2020:5423?
Affected packages include pacemaker, pacemaker-cli, and pacemaker-cluster-libs, among others.
5
Is it necessary to restart services after applying the fix for RHSA-2020:5423?
Yes, it is recommended to restart the Pacemaker services after applying the update for RHSA-2020:5423.