SUSE-SU-2016:2869-1: pacemaker&distro=SUSE Linux Enterprise High Availability Extension 12 SP2 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2016:2869-1 is a vulnerability in pacemaker&distro=SUSE Linux Enterprise High Availability Extension 12 SP2 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 22-11-2016PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for pacemaker This update for pacemaker fixes the following issues: Security issues fixed: - CVE-2016-7797: Notify other clients of a new connection only if the handshake has completed (bsc#967388, bsc#1002767). - CVE-2016-7035: Fixed improper IPC guarding in pacemaker (bsc#1007433). Bug fixes: - bsc#1003565: crmd: Record pending operations in the CIB before they are performed - bsc#1000743: pengine: Do not fence a maintenance node if it shuts down cleanly - bsc#987348: ping: Avoid temporary files for fping check - bsc#986644: libcrmcommon: report errors consistently when waiting for data on connection - bsc#986644: remote: Correctly calculate the remaining timeouts when receiving messages
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- pacemaker&distro=SUSE Linux Enterprise High Availability Extension 12 SP2< 1.1.15-21.1
- pacemaker&distro=SUSE Linux Enterprise Software Development Kit 12 SP2< 1.1.15-21.1
1 vendor · 2 products
References
10 links- bugzilla.suse.com/967388REPORT
- bugzilla.suse.com/986644REPORT
- bugzilla.suse.com/987348REPORT