Pacemaker Bug Fix and Enhancement Update - ALBA-2021:1088
Summary
ALBA-2021:1088: pacemaker bug fix and enhancement update. Affects pacemaker versions < 2.0.4-6.el8_3.2. Fixed in 2.0.4-6.el8_3.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Pacemaker is a cluster resource manager that ensures data integrity and application availability during failures. It is a collection of technologies working together to maintain high availability in a cluster environment.
Vulnerability Detail
This vulnerability in Pacemaker, identified as ALBA-2021:1088, has two main aspects. Firstly, Pacemaker never promotes a bundle until another transition unblocks it. Secondly, Pacemaker generates invalid XML for certain failures. These issues can lead to unexpected behavior and potential disruptions in the cluster resource management process.
How To Fix
Minimum fixed version
2.0.4-6.el8_3.2
This is the first release that contains the fix.
sudo dnf update pacemakerTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is advised to apply the recommended fix by updating the affected packages.
Conclusion
The Pacemaker bug fix and enhancement update addresses vulnerabilities related to bundle promotion and XML generation. It is crucial to update the affected packages to ensure the stability and reliability of the cluster resource management process. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for pacemaker →
FAQ
Pacemaker is a cluster resource manager that ensures high availability in a cluster environment by maintaining data integrity and application availability during failures.
This vulnerability can result in unexpected behavior and potential disruptions in the cluster resource management process.
To fix this vulnerability, update the affected packages to version 2.0.4-6.el8_3.2 or later.
No specific workaround has been provided. It is recommended to apply the fix by updating the affected packages.
For more information about this vulnerability, refer to the official AlmaLinux advisory ALBA-2021:1088.
Related vulnerabilities
Recent vulnerabilities recorded for pacemaker.
