Branch p10 update bulletin.

Package dstool_tk updated to version 0.2007-alt2 for branch p10 in task 280664.

Не запускается dstool_tk

Package pacemaker updated to version 2.1.0-alt1 for branch p10 in task 280649.

Published: 2020-10-27

BDU:2021-03617

Уязвимость программного средства управления ресурсами кластера Pacemaker, связанная с недостатками контроля доступа, позволяющая нарушителю получить доступ к конфиденциальной информации или вызвать отказ в обслуживании

Severity: HIGH (7.2) Vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2020-25654

Published: 2020-11-24
Modified: 2024-11-21

CVE-2020-25654

An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went through the configuration.

Severity: HIGH (7.2) Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.0

Branch p10 update on 2021-07-26

ALT-BU-2021-4067-1

ALT-PU-2021-2322-1

Closed bugs

Bug #40377

ALT-PU-2021-2323-1

Closed vulnerabilities

BDU:2021-03617

CVE-2020-25654