Oracle Linux 5 : cman (ELSA-2009-1341)

medium Nessus Plugin ID 181082

Language:

Synopsis

The remote Oracle Linux host is missing one or more security updates.

Description

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1341 advisory.

[2.0.115-1]
- RSA II fencing agent has been fixed.
- Resolves: rhbz#493802

[2.0.114-1]
- local variable 'verbose_filename' referenced before assignment has been fixed
- RSA II fencing agent has been fixed.
- Resolves: rhbz#493802 rhbz#514758

[2.0.113-1]
- Limitations with 2-node fence_scsi are now properly documented in the man page.
- Resolves: rhbz#512998

[2.0.112-1]
- The pexpect exception is now properly checked in fence agents.
- Resolves: rhbz#501586

[2.0.111-1]
- cman_tool leave remove does now properly reduces quorum.
- Resolves: rhbz#505258

[2.0.110-1]
- Updated fence_lpar man page to remove options that do not yet exist.
- Resolves: rhbz#498045

[2.0.108-1]
- A semaphore leak in cman has been fixed.
- Resolves: rhbz#505594

[2.0.107-1]
- Added man page for lpar fencing agent (fence_lpar).
- Resolves: rhbz#498045

[2.0.106-1]
- The lssyscfg command can take longer than the shell timeout which will cause fencing to fail, we now wait longer for the lssyscfg command to complete.
- Resolves: rhbz#504705

[2.0.105-1]
- The fencing agents no longer fail with pexpect exceptions.
- Resolves: rhbz#501586

[2.0.104-1]
- Broadcast communcations are now possible with cman
- fence_lpar can now login to IVM systems
- Resolves: rhbz#502674 rhbz#492808

[2.0.103-1]
- fence_apc no longer fails with a pexpect exception
- symlink vulnerabilities in fance_apc_snmp were fixed
- The virsh fencing agent was added.
- Resolves: rhbz#496629 rhbz#498952 rhbz#501586

[2.0.102-1]
- Correct return code is checked during disk scanning check.
- Resolves: rhbz#484956

[2.0.101-1]
- The SCSI fence agent now verifies that sg_persist is installed properly.
- The DRAC5 fencing agent now properly handles a modulename.
- QDisk now logs warning messages if it appears it's I/O to shared storage is hung.
- Resolves: rhbz#496724 rhbz#500450 rhbz#500567

[2.0.100-1]
- Support has been added for ePowerSwitch 8+ devices
- cluster.conf files can now have more than 52 entries inside a block inside [block]
- The output of the group_tool dump sub commands are no longer NULL padded.
- Using device='' instead of label='' no longer causes qdiskd to incorrectly exit
- The IPMI fencing agent has been modified to timeout after 10 seconds. It is also now possible to specify a different timeout with the '-t' option.
- The IPMI fencing agent now allows punctuation in the password
- Quickly starting and stopping the cman service no longer causes the cluster membership to become inconsistent across the cluster
- An issue with lock syncing causing 'receive_own from ...' errors in syslog has been fixed
- An issue which caused gfs_controld to segfault when mounting hundreds of filesystems has been fixed
- The LPAR fencing agent now properly reports status when an LPAR is in Open Firmware
- The APC SNMP fencing agent now properly recognizes outletStatusOn and outletStatusOff returns codes from the SNMP agent
- WTI Fencing agent can now connect to fencing devices with no password
- The rps-10 fencing agent now properly performs a reboot when run with no options.
- The IPMI fencing agent now supports different cipher types with the '-C' option
- Qdisk now properly scans devices and partitions
- Added support for LPAR/HMC v3
- cman now checks to see if a new node has state to prevent killing the first node during cluster setup
- service qdiskd start now works properly
- The McData fence agent now works properly with the Sphereon 4500 model
- The Egenera fence agent can now specify an ssh login name
- APC Fence agent works with non-admin accounts with firmware 3.5.x
- fence_xvmd now tries two methods to reboot a virtual machine
- Connections to openais are now allowed from unprivileged CPG clients with user and group of 'ais'
- Support has been added for Cisco 9124/9134 SAN switches
- groupd no longer allows the default fence domain to be '0' which would cause rgmanager to hang
- The RSA fence agent now supports ssh enabled RSA II devices
- DRAC fence agent now works with iDRAC on the Dell M600 Blade Chassis
- fence_drac5 now shows proper usage instructions
- cman no longer uses the wrong node name when getnameinfo() fails
- The SCSI fence agent now verifies that sg_persist is installed properly
- Resolves: rhbz#467112 rhbz#468966 rhbz#470318 rhbz#276541 rhbz#447964 rhbz#472786 rhbz#474163 rhbz#480401 rhbz#481566 rhbz#484095 rhbz#481664 rhbz#322291 rhbz#447497 rhbz#484956 rhbz#485700 rhbz#485026 rhbz#485199 rhbz#470983 rhbz#488958 rhbz#487501 rhbz#491640 rhbz#480178 rhbz#485469 rhbz#480836 rhbz#493207 rhbz#493802 rhbz#462390 rhbz#498329 rhbz#488565 rhbz#499871

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected cman and / or cman-devel packages.

Plugin Details

Severity: Medium

ID: 181082

File Name: oraclelinux_ELSA-2009-1341.nasl

Version: 1.2

Type: local

Agent: unix

Family: Oracle Linux Local Security Checks

Published: 9/7/2023

Updated: 10/22/2024

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 6.9

Temporal Score: 5.1

Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2008-6552

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:oracle:linux:5, p-cpe:/a:oracle:linux:cman, p-cpe:/a:oracle:linux:cman-devel

Required KB Items: Host/OracleLinux, Host/RedHat/release, Host/RedHat/rpm-list, Host/local_checks_enabled

Exploit Ease: No known exploits are available

Patch Publication Date: 9/8/2009

Vulnerability Publication Date: 10/15/2008

Reference Information

CVE: CVE-2008-4579, CVE-2008-6552

Detections

Analytics