[El-errata] ELBA-2020-6021 Oracle Linux 8 pacemaker bug fix update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Tue Dec 22 18:00:10 PST 2020

Oracle Linux Bug Fix Advisory ELBA-2020-6021


The following updated rpms for Oracle Linux 8 have been uploaded to the 
Unbreakable Linux Network:



Description of changes:

- Prevent users from bypassing ACLs by using IPC directly (CVE-2020-25654)
- Resolves: rhbz1891528

- Fix cibsecret bug when node name is different from hostname
- Resolves: rhbz1870873

- Synchronize start-up and shutdown with SBD
- Resolves: rhbz1718324

- Allow crm_node -l/-p options to work from Pacemaker Remote nodes
- Correct action timeout value listed in log message
- Fix regression in crm_mon --daemonize with HTML output
- Resolves: rhbz1796824
- Resolves: rhbz1856035
- Resolves: rhbz1857728

- Allow resource and operation defaults per resource or operation type
- Rebase on upstream 2.0.4 final release
- Support on-fail="demote" and no-quorum-policy="demote" options
- Remove incorrect comment from sysconfig file
- Resolves: rhbz1628701
- Resolves: rhbz1828488
- Resolves: rhbz1837747
- Resolves: rhbz1848789

- Improve cibsecret help and clean up code per static analysis
- Resolves: rhbz1793860

- Clear leaving node's attributes if there is no DC
- Add crm_mon --node option to limit display to particular node or 
tagged nodes
- Add crm_mon --include/--exclude options to select what sections are shown
- priority-fencing-delay option bases delay on where resources are active
- Pending DC fencing gets 'stuck' in status display
- crm_rule can now check rule expiration when "years" is specified
- crm_mon now formats error messages better
- Support for CIB secrets is enabled
- Rebase on latest upstream Pacemaker release
- Fix regression introduced in 8.2 so crm_node -n works on remote nodes
- Avoid infinite loop when topology is removed while unfencing is in 
- Resolves: rhbz1300604
- Resolves: rhbz1363907
- Resolves: rhbz1784601
- Resolves: rhbz1787751
- Resolves: rhbz1790591
- Resolves: rhbz1793653
- Resolves: rhbz1793860
- Resolves: rhbz1828488
- Resolves: rhbz1830535
- Resolves: rhbz1831775

- Clear leaving node's attributes if there is no DC
- Resolves: rhbz1791841

- Implement shutdown-lock feature
- Resolves: rhbz1712584

- Rebase on Pacemaker-2.0.3 final release
- Resolves: rhbz1752538

- Rebase on Pacemaker-2.0.3-rc3
- Resolves: rhbz1752538

- Rebase on Pacemaker-2.0.3-rc2
- Parse crm_mon --fence-history option correctly
- Put timeout on controller waiting for scheduler response
- Offer Pacemaker Remote option for bind address
- Calculate cluster recheck interval dynamically
- Clarify crm_resource help text
- Reduce system calls after forking a child process
- Resolves: rhbz1699978
- Resolves: rhbz1725236
- Resolves: rhbz1743377
- Resolves: rhbz1747553
- Resolves: rhbz1748805
- Resolves: rhbz1752538
- Resolves: rhbz1762025

- Make pacemaker-cli require tar and bzip2
- Resolves: rhbz#1741580

- Synchronize fence-history on fenced-restart
- Cleanup leftover pending-fence-actions when fenced is restarted
- Improve fencing of remote-nodes
- Resolves: rhbz#1708380
- Resolves: rhbz#1708378
- Resolves: rhbz#1721198
- Resolves: rhbz#1695737

- Add stonith_admin option to display XML output
- Add new crm_rule tool to check date/time rules
- List any constraints cleared by crm_resource --clear
- crm_resource --validate can now get resource parameters from command line
- Rebase on upstream version 2.0.2
- Default concurrent-fencing to true
- Resolves: rhbz#1555939
- Resolves: rhbz#1572116
- Resolves: rhbz#1631752

More information about the El-errata mailing list