ALBA-2022:0347 resource-agents bug fix and enhancement update

Not scored Published

Bug fixes for GCP resource agents prevent restart failures and permission errors in high-availability environments.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not needed
Fix
Available

What is ALBA-2022:0347?

ALBA-2022:0347 is a vulnerability in resource-agents, published on 1 Feb 2022.

Official description

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.

Bug Fix(es) and Enhancement(s):

  • gcp-vpc-move-vip, gcp-vpc-move-route, gcp-pd-move: A failed API call returns OCF_ERR_CONFIGURED, preventing restarts (BZ#2008955)

  • gcp-vpc-move-route and gcp-vpc-move-vip can fail with permission denied errors if token file is not found (BZ#2011839)

Which versions are affected by ALBA-2022:0347?

Linux distribution packages (4)
resource-agents AlmaLinux:8All versions4.1.1-98.el8_5.2
resource-agents-aliyun AlmaLinux:8All versions4.1.1-98.el8_5.2
resource-agents-gcp AlmaLinux:8All versions4.1.1-98.el8_5.2
resource-agents-paf AlmaLinux:8All versions4.1.1-98.el8_5.2

How do I fix ALBA-2022:0347?

Apply the vendor's patch.

Is ALBA-2022:0347 being exploited?

There is no known exploitation of ALBA-2022:0347 in the wild and no public exploit code.

Sources

Is ALBA-2022:0347 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free