pacemaker-1.1.15-5.0.1.AXS4

エラータID: AXSA:2021-1251:01

リリース日: 
2021/01/18 Monday - 13:36
題名: 
pacemaker-1.1.15-5.0.1.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- pacemaker には、クラスターにローカルのアカウントを持ち、
haclient グループに属する攻撃者が、設定を潜り抜けることができたとき、
ACL によって保護される様々なデーモンに IPC 通信を直接使用し、
ACL をバイパスして特定のタスクを実行できる脆弱性があります。
(CVE-2020-25654)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2020-25654
An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went through the configuration.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. pacemaker-1.1.15-5.0.1.AXS4.src.rpm
    MD5: 9309032b0a8848ae934b29a4d59269fc
    SHA-256: e308076cd70140de5c07b6d24f5c8a33a877408102f330f04662c5e859724ca2
    Size: 4.68 MB

Asianux Server 4 for x86
  1. pacemaker-1.1.15-5.0.1.AXS4.i686.rpm
    MD5: 0e5eb4859fb8c941133b981658346bcd
    SHA-256: 91455dc7030dfc0d983f62e0bcc7e131cc3d5120d843dc849d029e5b4c21e370
    Size: 426.82 kB
  2. pacemaker-cli-1.1.15-5.0.1.AXS4.i686.rpm
    MD5: 809e9ef78ea894d7a11fcfe369973cad
    SHA-256: 523f7a8fb49152f1d0193f23779ef59fcd65560a705cd30ee4e63f7a105c66a0
    Size: 286.61 kB
  3. pacemaker-cluster-libs-1.1.15-5.0.1.AXS4.i686.rpm
    MD5: 215c645f0e198281613c471dfbc87ddc
    SHA-256: 5d386166cf388b1e924ebc2cf9c8dbc5d0b670b2e1a2c420dc08a7b0c0b86cb6
    Size: 83.18 kB
  4. pacemaker-cts-1.1.15-5.0.1.AXS4.i686.rpm
    MD5: d98b79cc818c9bcf5c9800087dc9a3af
    SHA-256: 76ae8d4b8ce95b1a23624d667a2c4a46d6e74100f7a0d5d26ec9c43d3ff1973a
    Size: 217.80 kB
  5. pacemaker-doc-1.1.15-5.0.1.AXS4.i686.rpm
    MD5: c11597b558c534bae7b369087f6fd439
    SHA-256: 738488288cc6fa2adf56349c11be003aa491cfa8012d018092877ac8f62d06b4
    Size: 58.04 kB
  6. pacemaker-libs-1.1.15-5.0.1.AXS4.i686.rpm
    MD5: dd7e82216b79bd7f64e3b1f3b21bbd4e
    SHA-256: 73df886fdc1dc0cd8bc7e2e9d31bbbc810cc0a83dcfba39908633ac49bd0de32
    Size: 468.85 kB
  7. pacemaker-libs-devel-1.1.15-5.0.1.AXS4.i686.rpm
    MD5: bb3a9dc8435523bce0cca4b4ff0e1fea
    SHA-256: 08d6f910977cb393599c163036dd7124f53de61c8ac89ee4b2c4880b3916473b
    Size: 1.72 MB

Asianux Server 4 for x86_64
  1. pacemaker-1.1.15-5.0.1.AXS4.x86_64.rpm
    MD5: 1139bb88477b6d9b9026b6127f955646
    SHA-256: 9ca68bf90685086b8b909b1ca01069ac227aaae3d88b08d4b9e21954646d5f3a
    Size: 442.94 kB
  2. pacemaker-cli-1.1.15-5.0.1.AXS4.x86_64.rpm
    MD5: c894e3d7f1ec84388eb6a6e8e647e07a
    SHA-256: 896406b8d58d16aa9e721cbcc71ebef330abfe7b8fa45196288f335c953d4b19
    Size: 290.35 kB
  3. pacemaker-cluster-libs-1.1.15-5.0.1.AXS4.x86_64.rpm
    MD5: c6d0741cd9307f5ecdd8715c8b76752f
    SHA-256: b7a8323f4f08507eadd50bc2d0f3e5573a67eb440fc8e1781deb180e0212c2e4
    Size: 84.38 kB
  4. pacemaker-cts-1.1.15-5.0.1.AXS4.x86_64.rpm
    MD5: 83a99926691f6f254f17886f25d0015b
    SHA-256: 4bb5a3da56f727b6dd6e9a17863cfa05d12c481c1f5b990a87733e5783c2325d
    Size: 218.03 kB
  5. pacemaker-doc-1.1.15-5.0.1.AXS4.x86_64.rpm
    MD5: 148c92ead27a28e47d9b335686204ab2
    SHA-256: 3b09cb833f6e3d2d00ba41952372fa823fd3dc3d340eabc691e7970d75a3e754
    Size: 57.59 kB
  6. pacemaker-libs-1.1.15-5.0.1.AXS4.x86_64.rpm
    MD5: 2755169a23ffb17d1065482e391d83fb
    SHA-256: afa3e4a692728b70af9dac93e781fab0d102f13c1e7ac9015d16da359daffafb
    Size: 482.13 kB
  7. pacemaker-libs-devel-1.1.15-5.0.1.AXS4.x86_64.rpm
    MD5: 6c5cdd10da69ca9930332aa791544565
    SHA-256: eebabdb3049607a75ed06ca6836ddb706ad0ff5b67b6cfa235c3239e77ceb5d1
    Size: 1.72 MB
  8. pacemaker-cluster-libs-1.1.15-5.0.1.AXS4.i686.rpm
    MD5: 215c645f0e198281613c471dfbc87ddc
    SHA-256: 5d386166cf388b1e924ebc2cf9c8dbc5d0b670b2e1a2c420dc08a7b0c0b86cb6
    Size: 83.18 kB
  9. pacemaker-libs-1.1.15-5.0.1.AXS4.i686.rpm
    MD5: dd7e82216b79bd7f64e3b1f3b21bbd4e
    SHA-256: 73df886fdc1dc0cd8bc7e2e9d31bbbc810cc0a83dcfba39908633ac49bd0de32
    Size: 468.85 kB
  10. pacemaker-libs-devel-1.1.15-5.0.1.AXS4.i686.rpm
    MD5: bb3a9dc8435523bce0cca4b4ff0e1fea
    SHA-256: 08d6f910977cb393599c163036dd7124f53de61c8ac89ee4b2c4880b3916473b
    Size: 1.72 MB