pcs-0.9.143-15.el7

エラータID: AXSA:2015-718:02

Release date: 
Tuesday, November 24, 2015 - 16:45
Subject: 
pcs-0.9.143-15.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

pcs is a corosync and pacemaker configuration tool. It permits users to
easily view, modify and created pacemaker based clusters.

Security issues fixed with this release:

CVE-2015-3225
lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used
with Ruby on Rails 3.x and 4.x and other products, allows remote
attackers to cause a denial of service (SystemStackError) via a
request with a large parameter depth.

Enhancements:

* The pcs resource move and pcs resource ban commands now display a warning message to clarify the commands' behavior
* New command to move a Pacemaker resource to its preferred node
Fixed bugs:

* Before this update, a bug caused location, ordering, and colocation constraints related to a resource group to be removed when removing any resource from that group. This bug has been fixed, and the constraints are now preserved until the group has no resources left, and is removed.
* Previously, when a user disabled a resource clone or multi-state resource, and then later enabled a primitive resource within it, the clone or multi-state resource remained disabled. With this update, enabling a resource within a disabled clone or multi-state resource enables it.
* When the web UI displayed a list of resource attributes, a bug caused the list to be truncated at the first "=" character. This update fixes the bug and now the web UI displays lists of resource attributes correctly.
* The documentation for the "pcs stonith confirm" command was not clear. This could lead to incorrect usage of the command, which could in turn cause data corruption. With this update, the documentation has been improved and the "pcs stonith confirm" command is now more clearly explained.
* Previously, if there were any unauthenticated nodes, creating a new cluster, adding a node to an existing cluster, or adding a cluster to the web UI failed with the message "Node is not authenticated". With this update, when the web UI detects a problem with authentication, the web UI displays a dialog to authenticate nodes as necessary.
* Previously, the web UI displayed only primitive resources. Thus there was no way to set attributes, constraints and other properties separately for a parent resource and a child resource. This has now been fixed, and resources are displayed in a tree structure, meaning all resource elements can be viewed and edited independently.
Enhancements:

* A dashboard has been added which shows the status of clusters in the web UI. Previously, it was not possible to view all important information about clusters in one place. Now, a dashboard showing the status of clusters has been added to the main page of the web UI.
* With this update, the pcsd daemon automatically synchronizes pcsd configuration across a cluster. This enables the web UI to be run from any node, allowing management even if any particular node is down.
* The web UI can now be used to set permissions for users and groups on a cluster. This allows users and groups to have their access restricted to certain operations on certain clusters.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. pcs-0.9.143-15.el7.src.rpm
    MD5: 21cb075d81a5ab836140a4780beae291
    SHA-256: e619bdb561a4bef619a6860661b5488b684a7eb9b3b7255d67317d6106159ed6
    Size: 2.37 MB

Asianux Server 7 for x86_64
  1. pcs-0.9.143-15.el7.x86_64.rpm
    MD5: 2a219b6d6b1d42fabbe9d24d7d48736b
    SHA-256: 66db6adc8ad763f99f8f4db24f330f98508fec86a4f220f119ff0f681f579f10
    Size: 4.74 MB