[Debian-ha-maintainers] Bug#974563: corosync unable to communicate with pacemaker 1.1.16-1+deb9u1 which contains the fix for CVE-2020-25654

Alejandro Taboada alejandro.taboada at altipeak.com
Mon Nov 16 12:22:45 GMT 2020


Hi Markus,

Sorry for the delay. With this patch works when is applied only to 1 node. The services restart and the arm resources are up.
The problem appears again when I install the patch on a 2nd node. The the resources stopped again.

The only permission error I see is “warning: process_lrmd_message:	Rejecting IPC request 'lrmd_rsc_info' from unprivileged client crmd”.
Only for the lrmd_rsc_info action.

 See attached piece of log:



Kind regards,
Alejandro

> On 14 Nov 2020, at 00:02, Markus Koschany <apo at debian.org> wrote:
> 
> Am Freitag, den 13.11.2020, 23:13 -0300 schrieb Alejandro Taboada:
>> Hello Markus,
>> 
>> It doesn’t work. The output log is quite different. I throws a timeout and
>> just at the end the “unprivileged client crmd”.
>> See attached log.
> 
> I'm sorry but I uploaded an older version that missed a do_reply line. That's
> why are you seeing timeouts now. Now I have uploaded the correct version from
> my test server to https://people.debian.org/~apo/lts/pacemaker/
> 
> Please try again.
> 
> Regards,
> 
> Markus
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-ha-maintainers/attachments/20201116/fe12aa7c/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PastedGraphic-2.png
Type: image/png
Size: 2715653 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-ha-maintainers/attachments/20201116/fe12aa7c/attachment-0001.png>


More information about the Debian-ha-maintainers mailing list