[El-errata] ELBA-2020-6021 Oracle Linux 8 pacemaker bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2020-6021

http://linux.oracle.com/errata/ELBA-2020-6021.html

The following updated rpms for Oracle Linux 8 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
pacemaker-cli-2.0.4-6.el8_3.1.x86_64.rpm
pacemaker-2.0.4-6.el8_3.1.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/pacemaker-2.0.4-6.el8_3.1.src.rpm



Description of changes:

[2.0.4-6.1]
- Prevent users from bypassing ACLs by using IPC directly (CVE-2020-25654)
- Resolves: rhbz1891528

[2.0.4-6]
- Fix cibsecret bug when node name is different from hostname
- Resolves: rhbz1870873

[2.0.4-5]
- Synchronize start-up and shutdown with SBD
- Resolves: rhbz1718324

[2.0.4-4]
- Allow crm_node -l/-p options to work from Pacemaker Remote nodes
- Correct action timeout value listed in log message
- Fix regression in crm_mon --daemonize with HTML output
- Resolves: rhbz1796824
- Resolves: rhbz1856035
- Resolves: rhbz1857728

[2.0.4-3]
- Allow resource and operation defaults per resource or operation type
- Rebase on upstream 2.0.4 final release
- Support on-fail="demote" and no-quorum-policy="demote" options
- Remove incorrect comment from sysconfig file
- Resolves: rhbz1628701
- Resolves: rhbz1828488
- Resolves: rhbz1837747
- Resolves: rhbz1848789

[2.0.4-2]
- Improve cibsecret help and clean up code per static analysis
- Resolves: rhbz1793860

[2.0.4-1]
- Clear leaving node's attributes if there is no DC
- Add crm_mon --node option to limit display to particular node or 
tagged nodes
- Add crm_mon --include/--exclude options to select what sections are shown
- priority-fencing-delay option bases delay on where resources are active
- Pending DC fencing gets 'stuck' in status display
- crm_rule can now check rule expiration when "years" is specified
- crm_mon now formats error messages better
- Support for CIB secrets is enabled
- Rebase on latest upstream Pacemaker release
- Fix regression introduced in 8.2 so crm_node -n works on remote nodes
- Avoid infinite loop when topology is removed while unfencing is in 
progress
- Resolves: rhbz1300604
- Resolves: rhbz1363907
- Resolves: rhbz1784601
- Resolves: rhbz1787751
- Resolves: rhbz1790591
- Resolves: rhbz1793653
- Resolves: rhbz1793860
- Resolves: rhbz1828488
- Resolves: rhbz1830535
- Resolves: rhbz1831775

[2.0.3-5]
- Clear leaving node's attributes if there is no DC
- Resolves: rhbz1791841

[2.0.3-4]
- Implement shutdown-lock feature
- Resolves: rhbz1712584

[2.0.3-3]
- Rebase on Pacemaker-2.0.3 final release
- Resolves: rhbz1752538

[2.0.3-2]
- Rebase on Pacemaker-2.0.3-rc3
- Resolves: rhbz1752538

[2.0.3-1]
- Rebase on Pacemaker-2.0.3-rc2
- Parse crm_mon --fence-history option correctly
- Put timeout on controller waiting for scheduler response
- Offer Pacemaker Remote option for bind address
- Calculate cluster recheck interval dynamically
- Clarify crm_resource help text
- Reduce system calls after forking a child process
- Resolves: rhbz1699978
- Resolves: rhbz1725236
- Resolves: rhbz1743377
- Resolves: rhbz1747553
- Resolves: rhbz1748805
- Resolves: rhbz1752538
- Resolves: rhbz1762025

[2.0.2-3]
- Make pacemaker-cli require tar and bzip2
- Resolves: rhbz#1741580

[2.0.2-2]
- Synchronize fence-history on fenced-restart
- Cleanup leftover pending-fence-actions when fenced is restarted
- Improve fencing of remote-nodes
- Resolves: rhbz#1708380
- Resolves: rhbz#1708378
- Resolves: rhbz#1721198
- Resolves: rhbz#1695737

[2.0.2-1]
- Add stonith_admin option to display XML output
- Add new crm_rule tool to check date/time rules
- List any constraints cleared by crm_resource --clear
- crm_resource --validate can now get resource parameters from command line
- Rebase on upstream version 2.0.2
- Default concurrent-fencing to true
- Resolves: rhbz#1555939
- Resolves: rhbz#1572116
- Resolves: rhbz#1631752