SUSE-SU-2016:3162-1
Vulnerability from csaf_suse - Published: 2016-12-15 13:52 - Updated: 2026-09-20 12:20Summary
Security update for pacemaker
Severity
Moderate
Notes
Title of the patch: Security update for pacemaker
Description of the patch:
This update for pacemaker fixes one security issue and several non-security issues.
The following security issue has been fixed:
- libcrmcommon: Fix improper IPC guarding. (bsc#1007433, CVE-2016-7035)
The following non-security issues have been fixed:
- Add logrotate to reqs of pacemaker-cli.
- Add $remote_fs dependencies to the init scripts.
- all: Clarify licensing and copyrights.
- attrd,ipc: Prevent possible segfault on exit. (bsc#986056)
- attrd, libcrmcommon: Validate attrd requests better.
- attrd_updater: Fix usage of HAVE_ATOMIC_ATTRD.
- cib/fencing: Set status callback before connecting to cluster. (bsc#974108)
- ClusterMon: Fix to avoid matching other process with the same PID.
- crmd: Acknowledge cancellation operations for remote connection resources. (bsc#976865)
- crmd: Avoid timeout on older peers when cancelling a resource operation.
- crmd: Record pending operations in the CIB before they are performed. (bsc#1003565)
- crmd: Clear remote node operation history only when it comes up.
- crmd: Clear remote node transient attributes on disconnect. (bsc#981489)
- crmd: Don't abort transitions for CIB comment changes.
- crmd: Ensure the R_SHUTDOWN is set whenever we ask the DC to shut us down.
- crmd: Get full action information earlier. (bsc#981731)
- crmd: Graceful proxy shutdown is now tested. (bsc#981489)
- crmd: Keep a state of LRMD in the DC node latest.
- crmd,lrmd,liblrmd: Use defined constants for lrmd IPC operations. (bsc#981489)
- crmd: Mention that graceful remote shutdowns may cause connection failures. (bsc#981489)
- crmd/pengine: Handle on-fail=ignore properly. (bsc#981731)
- crmd/pengine: Implement on-fail=ignore without allow-fail. (bsc#981731)
- crmd: Remove dead code. (bsc#981731)
- crmd: Rename action number variable in process_graph_event(). (bsc#981731)
- crmd: Resend the shutdown request if the DC forgets.
- crmd: Respect start-failure-is-fatal even for artificially injected events. (bsc#981731)
- crmd: Set remote flag when gracefully shutting down remote nodes. (bsc#981489)
- crmd: Set the shutdown transient attribute in response to LRMD_IPC_OP_SHUTDOWN_REQ from remote nodes. (bsc#981489)
- crmd: Support graceful pacemaker_remote stops. (bsc#981489)
- crmd: Take start-delay into account for the timeout of the action timer. (bsc#977258)
- crmd: Use defined constant for magic 'direct nack' RC. (bsc#981731)
- crmd: Use proper resource agent name when caching metadata.
- crmd: When node load was reduced, crmd carries out a feasible action.
- crm_mon: Avoid logging errors for any CIB changes that we don't care about. (bsc#986931)
- crm_mon: Consistently print ms resource state.
- crm_mon: Do not call setenv with null value.
- crm_mon: Do not log errors for the known CIB changes that should be ignored. (bsc#986931)
- crm_mon: Fix time formatting on x32.
- cts: Avoid kill usage error if DummySD stop called when already stopped.
- CTS: Get Reattach test working again and up-to-date. (bsc#953192)
- cts: Simulate pacemaker_remote failure with kill. (bsc#981489)
- fencing/fence_legacy: Search capable devices by querying them through 'list' action for cluster-glue stonith
agents. (bsc#986265)
- fencing: Record the last known names of nodes to make sure fencing requested with nodeid works. (bsc#974108)
- libais,libcluster,libcrmcommon,liblrmd: Don't use %z specifier.
- libcib,libfencing,libtransition: Handle memory allocation errors without CRM_CHECK().
- lib: Correction of the deletion of the notice registration.
- libcrmcommon: Correct directory name in log message.
- libcrmcommon: Ensure crm_time_t structure is fully initialized by API calls.
- libcrmcommon: Log XML comments correctly.
- libcrmcommon: Properly handle XML comments when comparing v2 patchset diffs.
- libcrmcommon: Really ensure crm_time_t structure is fully initialized by API calls.
- libcrmcommon: Remove extraneous format specifier from log message.
- libcrmcommon: Report errors consistently when waiting for data on connection. (bsc#986644)
- libfencing: Report added node ID correctly.
- liblrmd: Avoid memory leak when closing or deleting lrmd connections.
- libpengine: Allow pe_order_same_node option for constraints.
- libpengine: Log message when stonith disabled, not enabled.
- libpengine: Only log startup-fencing warning once.
- libtransition: Potential memory leak if unpacking action fails.
- lrmd: Handle shutdown a little more cleanly. (bsc#981489)
- lrmd,libcluster: Ensure g_hash_table_foreach() is never passed a null table.
- lrmd,liblrmd: Add lrmd IPC operations for requesting and acknowledging shutdown. (bsc#981489)
- lrmd: Make proxied IPC providers/clients opaque. (bsc#981489)
- mcp: Improve comments for sysconfig options.
- pacemaker_remote: Set LSB Provides header to the service name.
- pacemaker_remote: Support graceful stops. (bsc#981489)
- PE: Correctly update the dependent actions of un-runnable clones.
- PE: Honor the shutdown transient attributes for remote nodes. (bsc#981489)
- pengine: Avoid memory leak when invalid constraint involves set.
- pengine: Avoid null dereference in new same-node ordering option.
- pengine: Avoid transition loop for start-then-stop + unfencing.
- pengine: Avoid use-after-free with location constraint + sets + templates.
- pengine: Better error handling when unpacking sets in location constraints.
- pengine: Consider resource failed if any of the configured monitor operations failed. (bsc#972187)
- pengine: Correction of the record judgment of the failed information.
- pengine: Do not fence a maintenance node if it shuts down cleanly. (bsc#1000743)
- pengine: Correctly set the environment variable 'OCF_RESKEY_CRM_meta_timeout' when 'start-delay' is configured.
(bsc#977258)
- pengine: Only set unfencing constraints once.
- pengine: Organize order of actions for master resources in anti-colocations. (bsc#977800)
- pengine: Organize order of actions for slave resources in anti-colocations. (bsc#977800)
- pengine: Properly order stop actions relative to stonith.
- pengine: Respect asymmetrical ordering when trying to move resources. (bsc#977675)
- pengine: Set OCF_RESKEY_CRM_meta_notify_active_* for multistate resources.
- pengine,tools: Display pending resource state by default when it's available. (bsc#986201)
- ping: Avoid temp files in fping_check. (bsc#987348)
- ping: Avoid temporary files for fping check. (bsc#987348)
- ping: Log sensible error when /tmp is full. (bsc#987348)
- ping resource: Use fping6 for IPv6 hosts. (bsc#976271)
- RA/SysInfo: Reset the node attribute '#health_disk' to 'green' when there's sufficient free disk. (bsc#975079)
- remote: Allow cluster and remote LRM API versions to diverge. (bsc#1009076)
- remote: Correctly calculate the remaining timeouts when receiving messages. (bsc#986644)
- resources: Use OCF version tagging correctly.
- services: Correctly clean up service actions for non-dbus case.
- spec: fence_pcmk only eligible for Pacemaker+CMAN.
- stonithd: Correction of the wrong connection process name.
- sysconfig: Minor tweaks (typo, wording).
- tools: Avoid memory leaks in crm_resource --restart.
- tools: Avoid memory leak when crm_mon unpacks constraints.
- tools: Correctly count starting resources when doing crm_resource --restart.
- tools: crm_resource -T option should not be hidden anymore.
- tools: crm_standby --version/--help should work without cluster.
- tools: Do not send command lines to syslog. (bsc#986676)
- tools: Do not assume all resources restart on same node with crm_resource --restart.
- tools: Don't require node to be known to crm_resource when deleting attribute.
- tools: Properly handle crm_resource --restart with a resource in a group.
- tools: Remember any existing target-role when doing crm_resource --restart.
- various: Issues discovered via valgrind and coverity.
Additionally, the following references have been added to the changelog:
bsc#970733, fate#318381, bsc#1002767, CVE-2016-7797, bsc#971129
Patchnames: slehasp4-pacemaker-12889
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
25 products, the same list as for
CVE-2016-7035
Threats
Impact
moderate
References
35 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for pacemaker",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for pacemaker fixes one security issue and several non-security issues.\n\nThe following security issue has been fixed:\n\n- libcrmcommon: Fix improper IPC guarding. (bsc#1007433, CVE-2016-7035)\n\nThe following non-security issues have been fixed:\n\n- Add logrotate to reqs of pacemaker-cli.\n- Add $remote_fs dependencies to the init scripts.\n- all: Clarify licensing and copyrights.\n- attrd,ipc: Prevent possible segfault on exit. (bsc#986056)\n- attrd, libcrmcommon: Validate attrd requests better.\n- attrd_updater: Fix usage of HAVE_ATOMIC_ATTRD.\n- cib/fencing: Set status callback before connecting to cluster. (bsc#974108)\n- ClusterMon: Fix to avoid matching other process with the same PID.\n- crmd: Acknowledge cancellation operations for remote connection resources. (bsc#976865)\n- crmd: Avoid timeout on older peers when cancelling a resource operation.\n- crmd: Record pending operations in the CIB before they are performed. (bsc#1003565)\n- crmd: Clear remote node operation history only when it comes up.\n- crmd: Clear remote node transient attributes on disconnect. (bsc#981489)\n- crmd: Don\u0027t abort transitions for CIB comment changes.\n- crmd: Ensure the R_SHUTDOWN is set whenever we ask the DC to shut us down.\n- crmd: Get full action information earlier. (bsc#981731)\n- crmd: Graceful proxy shutdown is now tested. (bsc#981489)\n- crmd: Keep a state of LRMD in the DC node latest.\n- crmd,lrmd,liblrmd: Use defined constants for lrmd IPC operations. (bsc#981489)\n- crmd: Mention that graceful remote shutdowns may cause connection failures. (bsc#981489)\n- crmd/pengine: Handle on-fail=ignore properly. (bsc#981731)\n- crmd/pengine: Implement on-fail=ignore without allow-fail. (bsc#981731)\n- crmd: Remove dead code. (bsc#981731)\n- crmd: Rename action number variable in process_graph_event(). (bsc#981731)\n- crmd: Resend the shutdown request if the DC forgets.\n- crmd: Respect start-failure-is-fatal even for artificially injected events. (bsc#981731)\n- crmd: Set remote flag when gracefully shutting down remote nodes. (bsc#981489)\n- crmd: Set the shutdown transient attribute in response to LRMD_IPC_OP_SHUTDOWN_REQ from remote nodes. (bsc#981489)\n- crmd: Support graceful pacemaker_remote stops. (bsc#981489)\n- crmd: Take start-delay into account for the timeout of the action timer. (bsc#977258)\n- crmd: Use defined constant for magic \u0027direct nack\u0027 RC. (bsc#981731)\n- crmd: Use proper resource agent name when caching metadata.\n- crmd: When node load was reduced, crmd carries out a feasible action.\n- crm_mon: Avoid logging errors for any CIB changes that we don\u0027t care about. (bsc#986931)\n- crm_mon: Consistently print ms resource state.\n- crm_mon: Do not call setenv with null value.\n- crm_mon: Do not log errors for the known CIB changes that should be ignored. (bsc#986931)\n- crm_mon: Fix time formatting on x32.\n- cts: Avoid kill usage error if DummySD stop called when already stopped.\n- CTS: Get Reattach test working again and up-to-date. (bsc#953192)\n- cts: Simulate pacemaker_remote failure with kill. (bsc#981489)\n- fencing/fence_legacy: Search capable devices by querying them through \u0027list\u0027 action for cluster-glue stonith \n agents. (bsc#986265)\n- fencing: Record the last known names of nodes to make sure fencing requested with nodeid works. (bsc#974108)\n- libais,libcluster,libcrmcommon,liblrmd: Don\u0027t use %z specifier.\n- libcib,libfencing,libtransition: Handle memory allocation errors without CRM_CHECK().\n- lib: Correction of the deletion of the notice registration.\n- libcrmcommon: Correct directory name in log message.\n- libcrmcommon: Ensure crm_time_t structure is fully initialized by API calls.\n- libcrmcommon: Log XML comments correctly.\n- libcrmcommon: Properly handle XML comments when comparing v2 patchset diffs.\n- libcrmcommon: Really ensure crm_time_t structure is fully initialized by API calls.\n- libcrmcommon: Remove extraneous format specifier from log message.\n- libcrmcommon: Report errors consistently when waiting for data on connection. (bsc#986644)\n- libfencing: Report added node ID correctly.\n- liblrmd: Avoid memory leak when closing or deleting lrmd connections.\n- libpengine: Allow pe_order_same_node option for constraints.\n- libpengine: Log message when stonith disabled, not enabled.\n- libpengine: Only log startup-fencing warning once.\n- libtransition: Potential memory leak if unpacking action fails.\n- lrmd: Handle shutdown a little more cleanly. (bsc#981489)\n- lrmd,libcluster: Ensure g_hash_table_foreach() is never passed a null table.\n- lrmd,liblrmd: Add lrmd IPC operations for requesting and acknowledging shutdown. (bsc#981489)\n- lrmd: Make proxied IPC providers/clients opaque. (bsc#981489)\n- mcp: Improve comments for sysconfig options.\n- pacemaker_remote: Set LSB Provides header to the service name.\n- pacemaker_remote: Support graceful stops. (bsc#981489)\n- PE: Correctly update the dependent actions of un-runnable clones.\n- PE: Honor the shutdown transient attributes for remote nodes. (bsc#981489)\n- pengine: Avoid memory leak when invalid constraint involves set.\n- pengine: Avoid null dereference in new same-node ordering option.\n- pengine: Avoid transition loop for start-then-stop + unfencing.\n- pengine: Avoid use-after-free with location constraint + sets + templates.\n- pengine: Better error handling when unpacking sets in location constraints.\n- pengine: Consider resource failed if any of the configured monitor operations failed. (bsc#972187)\n- pengine: Correction of the record judgment of the failed information.\n- pengine: Do not fence a maintenance node if it shuts down cleanly. (bsc#1000743)\n- pengine: Correctly set the environment variable \u0027OCF_RESKEY_CRM_meta_timeout\u0027 when \u0027start-delay\u0027 is configured. \n (bsc#977258)\n- pengine: Only set unfencing constraints once.\n- pengine: Organize order of actions for master resources in anti-colocations. (bsc#977800)\n- pengine: Organize order of actions for slave resources in anti-colocations. (bsc#977800)\n- pengine: Properly order stop actions relative to stonith.\n- pengine: Respect asymmetrical ordering when trying to move resources. (bsc#977675)\n- pengine: Set OCF_RESKEY_CRM_meta_notify_active_* for multistate resources.\n- pengine,tools: Display pending resource state by default when it\u0027s available. (bsc#986201)\n- ping: Avoid temp files in fping_check. (bsc#987348)\n- ping: Avoid temporary files for fping check. (bsc#987348)\n- ping: Log sensible error when /tmp is full. (bsc#987348)\n- ping resource: Use fping6 for IPv6 hosts. (bsc#976271)\n- RA/SysInfo: Reset the node attribute \u0027#health_disk\u0027 to \u0027green\u0027 when there\u0027s sufficient free disk. (bsc#975079)\n- remote: Allow cluster and remote LRM API versions to diverge. (bsc#1009076)\n- remote: Correctly calculate the remaining timeouts when receiving messages. (bsc#986644)\n- resources: Use OCF version tagging correctly.\n- services: Correctly clean up service actions for non-dbus case.\n- spec: fence_pcmk only eligible for Pacemaker+CMAN.\n- stonithd: Correction of the wrong connection process name.\n- sysconfig: Minor tweaks (typo, wording).\n- tools: Avoid memory leaks in crm_resource --restart.\n- tools: Avoid memory leak when crm_mon unpacks constraints.\n- tools: Correctly count starting resources when doing crm_resource --restart.\n- tools: crm_resource -T option should not be hidden anymore.\n- tools: crm_standby --version/--help should work without cluster.\n- tools: Do not send command lines to syslog. (bsc#986676)\n- tools: Do not assume all resources restart on same node with crm_resource --restart.\n- tools: Don\u0027t require node to be known to crm_resource when deleting attribute.\n- tools: Properly handle crm_resource --restart with a resource in a group.\n- tools: Remember any existing target-role when doing crm_resource --restart.\n- various: Issues discovered via valgrind and coverity.\n\nAdditionally, the following references have been added to the changelog:\n\nbsc#970733, fate#318381, bsc#1002767, CVE-2016-7797, bsc#971129\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slehasp4-pacemaker-12889",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_3162-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:3162-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20163162-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:3162-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-December/002489.html"
},
{
"category": "self",
"summary": "SUSE Bug 1000743",
"url": "https://bugzilla.suse.com/1000743"
},
{
"category": "self",
"summary": "SUSE Bug 1002767",
"url": "https://bugzilla.suse.com/1002767"
},
{
"category": "self",
"summary": "SUSE Bug 1003565",
"url": "https://bugzilla.suse.com/1003565"
},
{
"category": "self",
"summary": "SUSE Bug 1007433",
"url": "https://bugzilla.suse.com/1007433"
},
{
"category": "self",
"summary": "SUSE Bug 1009076",
"url": "https://bugzilla.suse.com/1009076"
},
{
"category": "self",
"summary": "SUSE Bug 953192",
"url": "https://bugzilla.suse.com/953192"
},
{
"category": "self",
"summary": "SUSE Bug 970733",
"url": "https://bugzilla.suse.com/970733"
},
{
"category": "self",
"summary": "SUSE Bug 971129",
"url": "https://bugzilla.suse.com/971129"
},
{
"category": "self",
"summary": "SUSE Bug 972187",
"url": "https://bugzilla.suse.com/972187"
},
{
"category": "self",
"summary": "SUSE Bug 974108",
"url": "https://bugzilla.suse.com/974108"
},
{
"category": "self",
"summary": "SUSE Bug 975079",
"url": "https://bugzilla.suse.com/975079"
},
{
"category": "self",
"summary": "SUSE Bug 976271",
"url": "https://bugzilla.suse.com/976271"
},
{
"category": "self",
"summary": "SUSE Bug 976865",
"url": "https://bugzilla.suse.com/976865"
},
{
"category": "self",
"summary": "SUSE Bug 977258",
"url": "https://bugzilla.suse.com/977258"
},
{
"category": "self",
"summary": "SUSE Bug 977675",
"url": "https://bugzilla.suse.com/977675"
},
{
"category": "self",
"summary": "SUSE Bug 977800",
"url": "https://bugzilla.suse.com/977800"
},
{
"category": "self",
"summary": "SUSE Bug 981489",
"url": "https://bugzilla.suse.com/981489"
},
{
"category": "self",
"summary": "SUSE Bug 981731",
"url": "https://bugzilla.suse.com/981731"
},
{
"category": "self",
"summary": "SUSE Bug 986056",
"url": "https://bugzilla.suse.com/986056"
},
{
"category": "self",
"summary": "SUSE Bug 986201",
"url": "https://bugzilla.suse.com/986201"
},
{
"category": "self",
"summary": "SUSE Bug 986265",
"url": "https://bugzilla.suse.com/986265"
},
{
"category": "self",
"summary": "SUSE Bug 986644",
"url": "https://bugzilla.suse.com/986644"
},
{
"category": "self",
"summary": "SUSE Bug 986676",
"url": "https://bugzilla.suse.com/986676"
},
{
"category": "self",
"summary": "SUSE Bug 986931",
"url": "https://bugzilla.suse.com/986931"
},
{
"category": "self",
"summary": "SUSE Bug 987348",
"url": "https://bugzilla.suse.com/987348"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7035 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7797 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7797/"
}
],
"title": "Security update for pacemaker",
"tracking": {
"current_release_date": "2026-09-20T12:20:34Z",
"generator": {
"date": "2016-12-15T13:52:25Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:3162-1",
"initial_release_date": "2016-12-15T13:52:25Z",
"revision_history": [
{
"date": "2016-12-15T13:52:25Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T12:20:34Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpacemaker-devel-0:1.1.12-18.1.i586",
"product": {
"name": "libpacemaker-devel-0:1.1.12-18.1.i586",
"product_id": "libpacemaker-devel-0:1.1.12-18.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpacemaker-devel@1.1.12-18.1?arch=i586\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libpacemaker3-0:1.1.12-18.1.i586",
"product": {
"name": "libpacemaker3-0:1.1.12-18.1.i586",
"product_id": "libpacemaker3-0:1.1.12-18.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpacemaker3@1.1.12-18.1?arch=i586\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-0:1.1.12-18.1.i586",
"product": {
"name": "pacemaker-0:1.1.12-18.1.i586",
"product_id": "pacemaker-0:1.1.12-18.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker@1.1.12-18.1?arch=i586\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-cli-0:1.1.12-18.1.i586",
"product": {
"name": "pacemaker-cli-0:1.1.12-18.1.i586",
"product_id": "pacemaker-cli-0:1.1.12-18.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker-cli@1.1.12-18.1?arch=i586\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-remote-0:1.1.12-18.1.i586",
"product": {
"name": "pacemaker-remote-0:1.1.12-18.1.i586",
"product_id": "pacemaker-remote-0:1.1.12-18.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker-remote@1.1.12-18.1?arch=i586\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libpacemaker-devel-0:1.1.12-18.1.ia64",
"product": {
"name": "libpacemaker-devel-0:1.1.12-18.1.ia64",
"product_id": "libpacemaker-devel-0:1.1.12-18.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpacemaker-devel@1.1.12-18.1?arch=ia64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libpacemaker3-0:1.1.12-18.1.ia64",
"product": {
"name": "libpacemaker3-0:1.1.12-18.1.ia64",
"product_id": "libpacemaker3-0:1.1.12-18.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpacemaker3@1.1.12-18.1?arch=ia64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-0:1.1.12-18.1.ia64",
"product": {
"name": "pacemaker-0:1.1.12-18.1.ia64",
"product_id": "pacemaker-0:1.1.12-18.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker@1.1.12-18.1?arch=ia64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-cli-0:1.1.12-18.1.ia64",
"product": {
"name": "pacemaker-cli-0:1.1.12-18.1.ia64",
"product_id": "pacemaker-cli-0:1.1.12-18.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker-cli@1.1.12-18.1?arch=ia64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-remote-0:1.1.12-18.1.ia64",
"product": {
"name": "pacemaker-remote-0:1.1.12-18.1.ia64",
"product_id": "pacemaker-remote-0:1.1.12-18.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker-remote@1.1.12-18.1?arch=ia64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpacemaker-devel-0:1.1.12-18.1.ppc64",
"product": {
"name": "libpacemaker-devel-0:1.1.12-18.1.ppc64",
"product_id": "libpacemaker-devel-0:1.1.12-18.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpacemaker-devel@1.1.12-18.1?arch=ppc64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libpacemaker3-0:1.1.12-18.1.ppc64",
"product": {
"name": "libpacemaker3-0:1.1.12-18.1.ppc64",
"product_id": "libpacemaker3-0:1.1.12-18.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpacemaker3@1.1.12-18.1?arch=ppc64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-0:1.1.12-18.1.ppc64",
"product": {
"name": "pacemaker-0:1.1.12-18.1.ppc64",
"product_id": "pacemaker-0:1.1.12-18.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker@1.1.12-18.1?arch=ppc64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-cli-0:1.1.12-18.1.ppc64",
"product": {
"name": "pacemaker-cli-0:1.1.12-18.1.ppc64",
"product_id": "pacemaker-cli-0:1.1.12-18.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker-cli@1.1.12-18.1?arch=ppc64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-remote-0:1.1.12-18.1.ppc64",
"product": {
"name": "pacemaker-remote-0:1.1.12-18.1.ppc64",
"product_id": "pacemaker-remote-0:1.1.12-18.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker-remote@1.1.12-18.1?arch=ppc64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpacemaker-devel-0:1.1.12-18.1.s390x",
"product": {
"name": "libpacemaker-devel-0:1.1.12-18.1.s390x",
"product_id": "libpacemaker-devel-0:1.1.12-18.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpacemaker-devel@1.1.12-18.1?arch=s390x\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libpacemaker3-0:1.1.12-18.1.s390x",
"product": {
"name": "libpacemaker3-0:1.1.12-18.1.s390x",
"product_id": "libpacemaker3-0:1.1.12-18.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpacemaker3@1.1.12-18.1?arch=s390x\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-0:1.1.12-18.1.s390x",
"product": {
"name": "pacemaker-0:1.1.12-18.1.s390x",
"product_id": "pacemaker-0:1.1.12-18.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker@1.1.12-18.1?arch=s390x\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-cli-0:1.1.12-18.1.s390x",
"product": {
"name": "pacemaker-cli-0:1.1.12-18.1.s390x",
"product_id": "pacemaker-cli-0:1.1.12-18.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker-cli@1.1.12-18.1?arch=s390x\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-remote-0:1.1.12-18.1.s390x",
"product": {
"name": "pacemaker-remote-0:1.1.12-18.1.s390x",
"product_id": "pacemaker-remote-0:1.1.12-18.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker-remote@1.1.12-18.1?arch=s390x\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpacemaker-devel-0:1.1.12-18.1.x86_64",
"product": {
"name": "libpacemaker-devel-0:1.1.12-18.1.x86_64",
"product_id": "libpacemaker-devel-0:1.1.12-18.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpacemaker-devel@1.1.12-18.1?arch=x86_64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libpacemaker3-0:1.1.12-18.1.x86_64",
"product": {
"name": "libpacemaker3-0:1.1.12-18.1.x86_64",
"product_id": "libpacemaker3-0:1.1.12-18.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpacemaker3@1.1.12-18.1?arch=x86_64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-0:1.1.12-18.1.x86_64",
"product": {
"name": "pacemaker-0:1.1.12-18.1.x86_64",
"product_id": "pacemaker-0:1.1.12-18.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker@1.1.12-18.1?arch=x86_64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-cli-0:1.1.12-18.1.x86_64",
"product": {
"name": "pacemaker-cli-0:1.1.12-18.1.x86_64",
"product_id": "pacemaker-cli-0:1.1.12-18.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker-cli@1.1.12-18.1?arch=x86_64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "pacemaker-remote-0:1.1.12-18.1.x86_64",
"product": {
"name": "pacemaker-remote-0:1.1.12-18.1.x86_64",
"product_id": "pacemaker-remote-0:1.1.12-18.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clusterlabs:pacemaker:1.1.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/pacemaker-remote@1.1.12-18.1?arch=x86_64\u0026upstream=pacemaker-0:1.1.12-18.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Availability Extension 11 SP4",
"product": {
"name": "SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/a:suse:sle-hae:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpacemaker-devel-0:1.1.12-18.1.i586 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.i586"
},
"product_reference": "libpacemaker-devel-0:1.1.12-18.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpacemaker-devel-0:1.1.12-18.1.ia64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ia64"
},
"product_reference": "libpacemaker-devel-0:1.1.12-18.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpacemaker-devel-0:1.1.12-18.1.ppc64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ppc64"
},
"product_reference": "libpacemaker-devel-0:1.1.12-18.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpacemaker-devel-0:1.1.12-18.1.s390x as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.s390x"
},
"product_reference": "libpacemaker-devel-0:1.1.12-18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpacemaker-devel-0:1.1.12-18.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.x86_64"
},
"product_reference": "libpacemaker-devel-0:1.1.12-18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpacemaker3-0:1.1.12-18.1.i586 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.i586"
},
"product_reference": "libpacemaker3-0:1.1.12-18.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpacemaker3-0:1.1.12-18.1.ia64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ia64"
},
"product_reference": "libpacemaker3-0:1.1.12-18.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpacemaker3-0:1.1.12-18.1.ppc64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ppc64"
},
"product_reference": "libpacemaker3-0:1.1.12-18.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpacemaker3-0:1.1.12-18.1.s390x as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.s390x"
},
"product_reference": "libpacemaker3-0:1.1.12-18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpacemaker3-0:1.1.12-18.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.x86_64"
},
"product_reference": "libpacemaker3-0:1.1.12-18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-0:1.1.12-18.1.i586 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.i586"
},
"product_reference": "pacemaker-0:1.1.12-18.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-0:1.1.12-18.1.ia64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ia64"
},
"product_reference": "pacemaker-0:1.1.12-18.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-0:1.1.12-18.1.ppc64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ppc64"
},
"product_reference": "pacemaker-0:1.1.12-18.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-0:1.1.12-18.1.s390x as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.s390x"
},
"product_reference": "pacemaker-0:1.1.12-18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-0:1.1.12-18.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.x86_64"
},
"product_reference": "pacemaker-0:1.1.12-18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-cli-0:1.1.12-18.1.i586 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.i586"
},
"product_reference": "pacemaker-cli-0:1.1.12-18.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-cli-0:1.1.12-18.1.ia64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ia64"
},
"product_reference": "pacemaker-cli-0:1.1.12-18.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-cli-0:1.1.12-18.1.ppc64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ppc64"
},
"product_reference": "pacemaker-cli-0:1.1.12-18.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-cli-0:1.1.12-18.1.s390x as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.s390x"
},
"product_reference": "pacemaker-cli-0:1.1.12-18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-cli-0:1.1.12-18.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.x86_64"
},
"product_reference": "pacemaker-cli-0:1.1.12-18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-remote-0:1.1.12-18.1.i586 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.i586"
},
"product_reference": "pacemaker-remote-0:1.1.12-18.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-remote-0:1.1.12-18.1.ia64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ia64"
},
"product_reference": "pacemaker-remote-0:1.1.12-18.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-remote-0:1.1.12-18.1.ppc64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ppc64"
},
"product_reference": "pacemaker-remote-0:1.1.12-18.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-remote-0:1.1.12-18.1.s390x as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.s390x"
},
"product_reference": "pacemaker-remote-0:1.1.12-18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pacemaker-remote-0:1.1.12-18.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 11 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.x86_64"
},
"product_reference": "pacemaker-remote-0:1.1.12-18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-7035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7035"
}
],
"notes": [
{
"category": "general",
"text": "An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7035",
"url": "https://www.suse.com/security/cve/CVE-2016-7035"
},
{
"category": "external",
"summary": "SUSE Bug 1007433 for CVE-2016-7035",
"url": "https://bugzilla.suse.com/1007433"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-12-15T13:52:25Z",
"details": "moderate"
}
],
"title": "CVE-2016-7035"
},
{
"cve": "CVE-2016-7797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7797"
}
],
"notes": [
{
"category": "general",
"text": "Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7797",
"url": "https://www.suse.com/security/cve/CVE-2016-7797"
},
{
"category": "external",
"summary": "SUSE Bug 1002767 for CVE-2016-7797",
"url": "https://bugzilla.suse.com/1002767"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker-devel-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:libpacemaker3-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-cli-0:1.1.12-18.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.i586",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ia64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.ppc64",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.s390x",
"SUSE Linux Enterprise High Availability Extension 11 SP4:pacemaker-remote-0:1.1.12-18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-12-15T13:52:25Z",
"details": "moderate"
}
],
"title": "CVE-2016-7797"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…