Gentoo Linux Security Advisory 202309-9 - Multiple vulnerabilities have been found in Pacemaker, the worst of which could result in root privilege escalation. Versions greater than or equal to 2.0.5_rc2 are affected.
83230435490a2f87299de357c01862d8ce15a18f158d7d5d9815b00668d7dd10
Red Hat Security Advisory 2019-1278-01 - The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Issues addressed include denial of service, information leakage, and use-after-free vulnerabilities.
0e135f17b3765f202d2a89491dcc2b769dbf1e71b955b09f7ddac4773c2da49f
Red Hat Security Advisory 2019-1279-01 - The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Issues addressed include denial of service, information leakage, and use-after-free vulnerabilities.
7a05d125130c1df4d51bedc27605da4d8a11ae06788bc388eb16613fb6cab048
Ubuntu Security Notice 3952-1 - Jan Pokorný discovered that Pacemaker incorrectly handled client-server authentication. A local attacker could possibly use this issue to escalate privileges. Jan Pokorný discovered that Pacemaker incorrectly handled certain verifications. A local attacker could possibly use this issue to cause a denial of service. Jan Pokorný discovered that Pacemaker incorrectly handled certain memory operations. A local attacker could possibly use this issue to obtain sensitive information in log outputs. This issue only applied to Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. Various other issues were also addressed.
ca81c7a9b99bb4639dea8d68f5f1b16b211d71222ecf68f6edb2f2d54027fbc1