RHSA-2020:5487: Moderate: pacemaker security update
Published Dec 15, 2020
·Updated
The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): pacemaker: ACL restrictions bypass (CVE-2020-25654) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
52 affected componentsFixes available
redhat/pacemaker<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cli-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cli-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cluster-libs<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cluster-libs<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cluster-libs-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cluster-libs-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-debugsource<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-debugsource<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-libs<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-libs<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-libs-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-libs-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-remote-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-remote-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-schemas<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cli<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cts<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-doc<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-libs-devel<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-libs-devel<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-nagios-plugins-metadata<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-remote<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cli-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cluster-libs<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cluster-libs-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-debugsource<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-libs<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-libs-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-remote-debuginfo<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cli<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-remote<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-cli<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-libs-devel<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker-remote<2.0.4-6.el8_3.1
2.0.4-6.el8_3.1
redhat/pacemaker<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-cli<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-cli-debuginfo<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-cluster-libs-debuginfo<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-debuginfo<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-debugsource<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-libs-debuginfo<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-libs-devel<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-remote<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-remote-debuginfo<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-cluster-libs<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
redhat/pacemaker-libs<2.0.4-6.el8_3.1.aa
2.0.4-6.el8_3.1.aa
Remediation
Event History
May 24, 2026
Advisory Published
via Red Hat·11:00 PM
Data Sourced
via Red Hat·11:00 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2020:5487?
The severity of RHSA-2020:5487 is classified as moderate.
2
What is the vulnerability associated with RHSA-2020:5487?
RHSA-2020:5487 addresses an ACL restrictions bypass vulnerability identified as CVE-2020-25654.
3
How do I fix RHSA-2020:5487?
To fix RHSA-2020:5487, you should update the affected packages to version 2.0.4-6.el8_3.1 or later.
4
Which software is affected by RHSA-2020:5487?
The affected software includes various Red Hat packages related to the Pacemaker cluster resource manager.
5
Is there a workaround for RHSA-2020:5487?
There are no known workarounds for RHSA-2020:5487; updating the packages is the recommended action.