SUSE-SU-2020:3073-1

    Dashboard / Vulnerabilities / SUSE-SU-2020:3073-1

    SUSE-SU-2020:3073-1

    Published: 28 Oct 2020Last Modified: 4 Feb 2026
    Upstream:
    CVE-2020-25654

    Summary: Security update for pacemaker

    Details: This update for pacemaker fixes the following issues: - executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916) - extra: add vim modelines to agents - extra: quote shell variables in agent code where appropriate (bsc#1175557) - extra: remove trailing whitespace from agent code - extra: update agent boilerplate (copyright/license notices) - extra: use 4-space indents in resource agent code - extra: use ':=' where appropriate in agent code - fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916) - move bcond_with/without up front for e.g. pcmk_release - pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916) - rpm: add spec option for enabling CIB secrets - rpm: put user-configurable items at top of spec - rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)

    References: https://www.suse.com/support/update/announcement/2020/suse-su-20203073-1/, https://bugzilla.suse.com/1167171, https://bugzilla.suse.com/1173668, https://bugzilla.suse.com/1175557, https://bugzilla.suse.com/1177916, https://www.suse.com/security/cve/CVE-2020-25654

    Affected packages

    Package

    Name: pacemaker

    Purl: pkg:rpm/suse/pacemaker&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP1

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.0.1+20190417.13d370ca9-3.15.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2020:3073-1 | CVE-DB