Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 28 Security Advisory: pcs Critical Privilege Escalation Fix

Security fix for CVE-2018-1086 and CVE-2018-1079 Rebased to latest upstream sources. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-bbfb0f5bc9 2018-04-15 02:32:41.336450 --------------------------------------------------------------------------------Name : pcs Product : Fedora 28 Version : 0.9.164 Release : 1.fc28 URL : https://github.com/ClusterLabs/pcs Summary : Pacemaker Configuration System Description : pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and create pacemaker based clusters. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2018-1086 and CVE-2018-1079 Rebased to latest upstream sources --------------------------------------------------------------------------------References: [ 1 ] Bug #1550243 - CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call https://bugzilla.redhat.com/show_bug.cgi?id=1550243 [ 2 ] Bug #1557366 - CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure https://bugzilla.redhat.com/show_bug.cgi?id=1557366 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade pcs' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. .Fedora 28 release tackles essential vulnerabilities in systems, guaranteeing correct setup and safeguarding against cluster risks.. Fedora Security Update,Pcs Configuration Tool,Privilege Escalation,Information Disclosure. . Severity: Critical. LinuxSecurity.com Team

Apr 15, 2018 •Critical Fedora