Merge pull request #2206 from kgaillot/cve
978d3557812e
Actions

Description

Merge pull request #2206 from kgaillot/cve

Fix ACL bypass vulnerability (CVE-2020-25654)

Details

Provenance

kgaillot	Authored on Oct 27 2020, 2:48 PM
GitHub <noreply@github.com>	Committed on Oct 27 2020, 2:48 PM

Parents

rP2bccf968f4eb: Refactor: libcrmcommon: move a couple functions to more appropriate source files
rP354625c628f9: Merge pull request #2204 from kgaillot/2.0

Branches

Unknown

Tags

Unknown

Event Timeline

Merged Changes

2bccf968f4eb Refactor: libcrmcommon: move a couple functions to more appropriate source files
Author
kgaillot
Browse Repository
No Audits
e2a1142264c7 Low: pacemakerd: handle shutdown requests better
Author
kgaillot
Browse Repository
No Audits
66a982203a27 Low: daemons,libcrmcommon: send status code with client acks
Author
kgaillot
Browse Repository
No Audits
f7e40da9d32f Doc: Pacemaker Explained: document limitations of ACLs
Author
kgaillot
Browse Repository
No Audits
34cb03a04b57 High: fencer: restrict certain IPC requests to privileged users
Author
kgaillot
Browse Repository
No Audits
83c6d555df9d High: pacemakerd: ignore shutdown requests from unprivileged users
Author
kgaillot
Browse Repository
No Audits
59933b085277 Low: pacemakerd: check client for NULL before using it
Author
kgaillot
Browse Repository
No Audits
73d336c79d07 High: executor: restrict certain IPC requests to Pacemaker daemons
Author
kgaillot
Browse Repository
No Audits
3dbe8e2066d4 Low: executor: return appropriate error code when no remote support
Author
kgaillot
Browse Repository
No Audits
34f936335750 Low: executor: mark controller connections to pacemaker-remoted as privileged
Author
kgaillot
Browse Repository
No Audits
f9705d0b9ba0 Log: executor: show CRM_OP_REGISTER rc in debug message
Author
kgaillot
Browse Repository
No Audits

Changes (17)

Path

Size

daemons/

attrd/

based/

controld/

execd/

fenced/

pacemakerd/

schedulerd/

pacemaker-schedulerd.c

doc/

sphinx/

Pacemaker_Explained/

acls.rst

include/

crm/

common/

internal.h

ipc_internal.h

util.h

lib/

common/

ipc_server.c

messages.c

utils.c

maint/

mocked/

based.c

rP978d3557812e

View Options

daemons/attrd/pacemaker-attrd.h

View Options

daemons/based/based_callbacks.c

View Options

daemons/controld/controld_control.c

View Options

daemons/execd/execd_commands.c

View Options

daemons/execd/remoted_tls.c

View Options

daemons/fenced/fenced_commands.c

View Options

daemons/fenced/pacemaker-fenced.c

View Options

daemons/pacemakerd/pacemakerd.c

View Options

daemons/schedulerd/pacemaker-schedulerd.c

View Options

doc/sphinx/Pacemaker_Explained/acls.rst

View Options

include/crm/common/internal.h

View Options

include/crm/common/ipc_internal.h

View Options

include/crm/common/util.h

View Options

lib/common/ipc_server.c

View Options

lib/common/messages.c

View Options

lib/common/utils.c

View Options

Merge pull request #2206 from kgaillot/cve978d3557812eActions

Description

Details

Event Timeline

Merged Changes

Changes (17)

rP978d3557812e

daemons/attrd/pacemaker-attrd.h

daemons/based/based_callbacks.c

daemons/controld/controld_control.c

daemons/execd/execd_commands.c

daemons/execd/remoted_tls.c

daemons/fenced/fenced_commands.c

daemons/fenced/pacemaker-fenced.c

daemons/pacemakerd/pacemakerd.c

daemons/schedulerd/pacemaker-schedulerd.c

doc/sphinx/Pacemaker_Explained/acls.rst

include/crm/common/internal.h

include/crm/common/ipc_internal.h

include/crm/common/util.h

lib/common/ipc_server.c

lib/common/messages.c

lib/common/utils.c

maint/mocked/based.c

Merge pull request #2206 from kgaillot/cve
978d3557812e
Actions