Linux · Security advisory · May 27, 2019
RHSA-2019:1279: Security update for 10 packages
RHSA-2019:1279, released May 27, 2019, fixes 3 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0190
79th percentile
Priority of the 3 CVEs
Patch now 0
Urgent 0
High 2
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| pacemaker | RHEL 8 | 0:2.0.1-4.el8_0.3 |
| pacemaker-cli | RHEL 8 | 0:2.0.1-4.el8_0.3 |
| pacemaker-cluster-libs | RHEL 8 | 0:2.0.1-4.el8_0.3 |
| pacemaker-cts | RHEL 8 | 0:2.0.1-4.el8_0.3 |
| pacemaker-doc | RHEL 8 | 0:2.0.1-4.el8_0.3 |
| pacemaker-libs | RHEL 8 | 0:2.0.1-4.el8_0.3 |
| pacemaker-libs-devel | RHEL 8 | 0:2.0.1-4.el8_0.3 |
| pacemaker-nagios-plugins-metadata | RHEL 8 | 0:2.0.1-4.el8_0.3 |
| pacemaker-remote | RHEL 8 | 0:2.0.1-4.el8_0.3 |
| pacemaker-schemas | RHEL 8 | 0:2.0.1-4.el8_0.3 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2019-3885 | pacemaker: The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity an... | 7.5 | 0.0190 | None reported | |
| High | CVE-2018-16877 | pacemaker: The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity an... | 8.8 | 0.0038 | None reported | |
| Routine | CVE-2018-16878 | pacemaker: The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity an... | 6.2 | 0.0041 | None reported |
Showing 1 to 3 of 3
1