openSUSE-SU-2021:3665-1

    Dashboard / Vulnerabilities / openSUSE-SU-2021:3665-1

    openSUSE-SU-2021:3665-1

    Published: 16 Nov 2021Last Modified: 16 Nov 2021

    Summary: Security update for drbd-utils

    Details: This update for drbd-utils fixes the following issues: - make all binaries position independent (basc#1185132). - Upgrade to 9.0.18 (bsc#1189363) * build: remove rpm related targets * drbdsetup,v84: fix minor compile warnings * systemd: resource specific activation * systemd: drbd-reactor promoter templates * doc: fix maximum ping timeout * doc: add man pages for the systemd templates * drbdadm,v9: fix dstate for diskless volumes * build/release: use lbvers.py * drbd-attr: don't leak fd to drbdsetup * doc: various fixes and additions * drbdsetup,events2,v9: add backing_device * build,Debian: rm dh-systemd dependency * drbdsetup,events2,v9: fix --poll regression * drbdmeta: fix bug with ALs with small final extents * build,Debian: rm mail recommends * drbdsetup,events2,v9: allow --poll without --now * drbdsetup,invalidate: allow bitmap based resync after verify * drbdadm,sh-ll-dev: change output to 'none' if diskless * drbdadm,v9: allow set-gi in single node clusters * drbsetup,events2,v9: diff(erential) output * drbsetup,events2,v9: add --full output * v9: allow resource rename, also in drbdmon * drbdadm,v9: allow c-max-rate to be disabled * New drbd-attr Pacemaker RA * events2: handle mixed initial state and multicast events * events2: fix regression to always print resync done - Prepare '/usr' merge. (bsc#1029961)

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/OTZPTDVSROTODVKJ22XXXS3E33HLFZPE/, https://bugzilla.suse.com/1029961, https://bugzilla.suse.com/1185132, https://bugzilla.suse.com/1189363

    Affected packages

    Package

    Name: drbd-utils

    Purl: pkg:rpm/opensuse/drbd-utils&distro=openSUSE%20Leap%2015.3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -9.18.0-4.7.2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    openSUSE-SU-2021:3665-1 | CVE-DB