Resource-agents Bug Fix and Enhancement Update - ALBA-2021:3579
Summary
ALBA-2021:3579: resource-agents bug fix and enhancement update. Affects resource-agents versions < 4.1.1-90.el8_4.7. Fixed in 4.1.1-90.el8_4.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.
Vulnerability Detail
The resource-agents package in AlmaLinux 8 is affected by a bug that requires fixing and enhancement. The LVM-activate script's start operation always recreates a drop-in file and runs systemctl daemon-reload. This bug has been identified as BZ#1972236. The vulnerability can potentially impact the stability and reliability of the high-availability environment.
How To Fix
Minimum fixed version
4.1.1-90.el8_4.7
This is the first release that contains the fix.
sudo dnf update resource-agents
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The resource-agents package in AlmaLinux 8 is affected by a bug that requires fixing and enhancement. It is recommended to update the package to version 4.1.1-90.el8_4.7 or later to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for resource-agents →
FAQ
The resource-agents package provides scripts that interface with various services to enable high-availability (HA) operations in the Pacemaker and RGManager service managers.
This vulnerability can affect the stability and reliability of the high-availability environment.
To fix this vulnerability, update the resource-agents package to version 4.1.1-90.el8_4.7 or later.
No specific workarounds have been provided for this vulnerability.
You can find more information about this vulnerability in the AlmaLinux OSV Database advisory: https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALBA-2021:3579.json
Related vulnerabilities
Recent vulnerabilities recorded for resource-agents.