sanlock bug fix and enhancement update
Summary
ALBA-2022:1547: sanlock bug fix and enhancement update. Affects python3-sanlock versions < 3.8.4-2.el8_5. Fixed in 3.8.4-2.el8_5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sanlock packages provide a shared storage lock manager. Hosts with shared access to a block device or a file can use sanlock to synchronize their activities. VDSM and libvirt use sanlock to synchronize access to shared devices or files.
Vulnerability Detail
The vulnerability in the sanlock packages allows the lockspace to get stuck in the 'ADD' state for days. This issue can cause synchronization problems and hinder the proper functioning of shared devices or files.
How To Fix
Minimum fixed version
3.8.4-2.el8_5
This is the first release that contains the fix.
sudo dnf update python3-sanlockTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The sanlock bug fix and enhancement update addresses a vulnerability that can cause synchronization problems with shared devices or files. It is recommended to update the sanlock packages to version 3.8.4-2.el8_5 or later to fix this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for python3-sanlock →
FAQ
Sanlock is a shared storage lock manager used by hosts with shared access to block devices or files to synchronize their activities.
The vulnerability affects the following packages: python3-sanlock, sanlk-reset, sanlock, and sanlock-devel.
The vulnerability can cause the lockspace to get stuck in the 'ADD' state for days, leading to synchronization problems and hindering access to shared devices or files.
To fix this vulnerability, update the sanlock packages to version 3.8.4-2.el8_5 or later.
More information about this vulnerability can be found in the advisory on the AlmaLinux OSV Database: https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALBA-2022:1547.json
Related vulnerabilities
Recent vulnerabilities recorded for python3-sanlock.
