<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jan 20, 2023 at 2:19 AM A Gunasekar <<a href="mailto:a.gunasekar@ericsson.com">a.gunasekar@ericsson.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-5987726935334821703">
<div style="overflow-wrap: break-word;" lang="EN-IN">
<div class="m_-5987726935334821703WordSection1">
<p class="MsoNormal"><span>Hi Wahl.<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>The solution Tomas as suggested is from Redhat delivered rpm packages “</span><b>pcs-0.9.169-3.el7_9.3</b><span>”.
<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>But we are using Cluster Lab delivered rpm packages in our node.<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>So it would be good if we get fixed deliverables from Cluster Lab delivered rpms.</span></p></div></div></div></blockquote><div><br></div><div>+ users list</div><div><br></div><div>Please include the mailing list on emails</div><div> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-5987726935334821703"><div style="overflow-wrap: break-word;" lang="EN-IN"><div class="m_-5987726935334821703WordSection1"><p class="MsoNormal"><span><u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<table cellspacing="8" cellpadding="0" border="0">
<tbody>
<tr>
<td style="padding:0.75pt">
<p class="MsoNormal"><a href="http://www.ericsson.com/" target="_blank"><span style="font-size:10pt;font-family:"Ericsson Hilda";color:windowtext;text-decoration:none"><img style="width: 0.3125in; height: 0.3125in;" id="m_-5987726935334821703Picture_x0020_4" src="cid:185ceb400224cff311" alt="Ericsson" width="30" height="30" border="0"></span></a><span style="font-size:10pt;font-family:"Ericsson Hilda""><u></u><u></u></span></p>
</td>
</tr>
<tr>
<td style="padding:0.75pt"></td>
</tr>
<tr>
<td style="padding:0.75pt 0.75pt 5pt">
<p class="MsoNormal"><b><span style="font-size:10pt;font-family:"Ericsson Hilda"">Gunasekar A
</span></b><b><span style="font-size:10pt;font-family:"Ericsson Hilda""><u></u><u></u></span></b></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Senior Software Engineer<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">BDGS SA BSS PDU BSS PDG EC CH NGCRS<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Mobile: +919894561292<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Email ID:
<a href="mailto:a.gunasekar@ericsson.com" target="_blank"><span style="color:rgb(5,99,193)">a.gunasekar@ericsson.com</span></a><b><u></u><u></u></b></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<div>
<div style="border-color:rgb(225,225,225) currentcolor currentcolor;border-style:solid none none;border-width:1pt medium medium;padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> A Gunasekar
<br>
<b>Sent:</b> 20 January 2023 15:12<br>
<b>To:</b> Reid Wahl <<a href="mailto:nwahl@redhat.com" target="_blank">nwahl@redhat.com</a>><br>
<b>Cc:</b> M Vasanthakumar <<a href="mailto:m.vasanthakumar@ericsson.com" target="_blank">m.vasanthakumar@ericsson.com</a>>; S Sathish S <<a href="mailto:s.s.sathish@ericsson.com" target="_blank">s.s.sathish@ericsson.com</a>><br>
<b>Subject:</b> RE: [ClusterLabs] Fix for CVE-2022-30123 and CVE-2019-11358<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span>Thanks Wahl for this information
<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<div style="border-color:rgb(225,225,225) currentcolor currentcolor;border-style:solid none none;border-width:1pt medium medium;padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Reid Wahl <<a href="mailto:nwahl@redhat.com" target="_blank">nwahl@redhat.com</a>>
<br>
<b>Sent:</b> 20 January 2023 11:57<br>
<b>To:</b> A Gunasekar <<a href="mailto:a.gunasekar@ericsson.com" target="_blank">a.gunasekar@ericsson.com</a>><br>
<b>Cc:</b> M Vasanthakumar <<a href="mailto:m.vasanthakumar@ericsson.com" target="_blank">m.vasanthakumar@ericsson.com</a>>; S Sathish S <<a href="mailto:s.s.sathish@ericsson.com" target="_blank">s.s.sathish@ericsson.com</a>><br>
<b>Subject:</b> Re: [ClusterLabs] Fix for CVE-2022-30123 and CVE-2019-11358<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Thu, Jan 19, 2023 at 9:19 PM A Gunasekar <<a href="mailto:a.gunasekar@ericsson.com" target="_blank">a.gunasekar@ericsson.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<div>
<div>
<p class="MsoNormal">Hi Wahl,<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Tomas update was not visible to us and Thanks for sharing it here.<u></u><u></u></p>
<p class="MsoNormal"><a href="https://protect2.fireeye.com/v1/url?k=31323334-501d5122-313273af-454445555731-ccdbf0db8445bdb4&q=1&e=a7a59750-e061-4298-8714-ebe38fc95520&u=https%3A%2F%2Flists.clusterlabs.org%2Fpipermail%2Fusers%2F2022-December%2F030734.html" target="_blank">https://lists.clusterlabs.org/pipermail/users/2022-December/030734.html</a><u></u><u></u></p>
</div>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">You're welcome. Unfortunately, the threads are separated by month. So if a reply is sent in a different month, it doesn't appear in the original thread. You sent your original email in December, and Tomas replied in January. See the following
links:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><a href="https://protect2.fireeye.com/v1/url?k=31323334-501d5122-313273af-454445555731-8bc25f8cc580c14b&q=1&e=a7a59750-e061-4298-8714-ebe38fc95520&u=https%3A%2F%2Flists.clusterlabs.org%2Fpipermail%2Fusers%2F2023-January%2Fthread.html" target="_blank">https://lists.clusterlabs.org/pipermail/users/2023-January/thread.html</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><a href="https://protect2.fireeye.com/v1/url?k=31323334-501d5122-313273af-454445555731-da3abaa3680ed01a&q=1&e=a7a59750-e061-4298-8714-ebe38fc95520&u=https%3A%2F%2Flists.clusterlabs.org%2Fpipermail%2Fusers%2F2023-January%2F030750.html" target="_blank">https://lists.clusterlabs.org/pipermail/users/2023-January/030750.html</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<table cellspacing="8" cellpadding="0" border="0">
<tbody>
<tr>
<td style="padding:0.75pt">
<p class="MsoNormal"><a href="http://www.ericsson.com/" target="_blank"><span style="font-size:10pt;font-family:"Ericsson Hilda";color:windowtext;text-decoration:none"><img style="width: 0.3125in; height: 0.3125in;" id="m_-5987726935334821703m_4618491395621331111Picture_x0020_3" src="cid:185ceb400224cff311" alt="Ericsson" width="30" height="30" border="0"></span></a><u></u><u></u></p>
</td>
</tr>
<tr>
<td style="padding:0.75pt"></td>
</tr>
<tr>
<td style="padding:0.75pt 0.75pt 5pt">
<p class="MsoNormal"><b><span style="font-size:10pt;font-family:"Ericsson Hilda"">Gunasekar A
</span></b><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Senior Software Engineer</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">BDGS SA BSS PDU BSS PDG EC CH NGCRS</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Mobile: +919894561292</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Email ID:
<a href="mailto:a.gunasekar@ericsson.com" target="_blank"><span style="color:rgb(5,99,193)">a.gunasekar@ericsson.com</span></a></span><u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
<div style="border-style:solid none none;border-width:1pt medium medium;padding:3pt 0cm 0cm;border-color:currentcolor">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Reid Wahl <<a href="mailto:nwahl@redhat.com" target="_blank">nwahl@redhat.com</a>>
<br>
<b>Sent:</b> 20 January 2023 03:07<br>
<b>To:</b> Cluster Labs - All topics related to open-source clustering welcomed <<a href="mailto:users@clusterlabs.org" target="_blank">users@clusterlabs.org</a>><br>
<b>Cc:</b> A Gunasekar <<a href="mailto:a.gunasekar@ericsson.com" target="_blank">a.gunasekar@ericsson.com</a>>; M Vasanthakumar <<a href="mailto:m.vasanthakumar@ericsson.com" target="_blank">m.vasanthakumar@ericsson.com</a>>; S Sathish S <<a href="mailto:s.s.sathish@ericsson.com" target="_blank">s.s.sathish@ericsson.com</a>><br>
<b>Subject:</b> Re: [ClusterLabs] Fix for CVE-2022-30123 and CVE-2019-11358</span><u></u><u></u></p>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">On Thu, Jan 19, 2023 at 12:54 PM A Gunasekar via Users <<a href="mailto:users@clusterlabs.org" target="_blank">users@clusterlabs.org</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt;border-color:currentcolor currentcolor currentcolor rgb(204,204,204)">
<div>
<div>
<div>
<p class="MsoNormal">Hi Team,<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Can we get some update on this.<u></u><u></u></p>
</div>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Hi,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">What update are you seeking? It looks like Tomas already answered your question. I'll paste his answer again here.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">> Hi A Gunasekar,<br>
> <br>
> As far as I can see, updated pcs packages pcs-0.9.169-3.el7_9.3 which <br>
> fix the mentioned CVEs were released on 2022-11-02.<br>
> <br>
> Regards,<br>
> Tomas<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<blockquote style="border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt;border-color:currentcolor currentcolor currentcolor rgb(204,204,204)">
<div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<table cellspacing="8" cellpadding="0" border="0">
<tbody>
<tr>
<td style="padding:0.75pt">
<p class="MsoNormal"><a href="http://www.ericsson.com/" target="_blank"><span style="font-size:10pt;font-family:"Ericsson Hilda";color:windowtext;text-decoration:none"><img style="width: 0.3125in; height: 0.3125in;" id="m_-5987726935334821703m_4618491395621331111m_-4999658159260330428Picture_x0020_2" src="cid:185ceb400224cff311" alt="Ericsson" width="30" height="30" border="0"></span></a><u></u><u></u></p>
</td>
</tr>
<tr>
<td style="padding:0.75pt"></td>
</tr>
<tr>
<td style="padding:0.75pt 0.75pt 5pt">
<p class="MsoNormal"><b><span style="font-size:10pt;font-family:"Ericsson Hilda"">Gunasekar A
</span></b><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Senior Software Engineer</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">BDGS SA BSS PDU BSS PDG EC CH NGCRS</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Mobile: +919894561292</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Email ID:
<a href="mailto:a.gunasekar@ericsson.com" target="_blank">a.gunasekar@ericsson.com</a></span><u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
<div>
<div style="border-style:solid none none;border-width:1pt medium medium;padding:3pt 0cm 0cm;border-color:currentcolor">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> A Gunasekar
<br>
<b>Sent:</b> 21 December 2022 18:59<br>
<b>To:</b> <a href="mailto:users@clusterlabs.org" target="_blank">users@clusterlabs.org</a><br>
<b>Cc:</b> S Sathish S <<a href="mailto:s.s.sathish@ericsson.com" target="_blank">s.s.sathish@ericsson.com</a>>; M Vasanthakumar <<a href="mailto:m.vasanthakumar@ericsson.com" target="_blank">m.vasanthakumar@ericsson.com</a>><br>
<b>Subject:</b> Fix for CVE-2022-30123 and CVE-2019-11358</span><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Hi Team,<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Please be informed, we have got notified from our security tool that our pcs version 0.9 is affected by the
<b>CVE-2022-30123 and CVE-2019-11358</b>. <u></u><u></u></p>
<p class="MsoNormal">It would be great if we help to get answers for the below queries.<u></u><u></u></p>
<p class="MsoNormal"><b> </b><u></u><u></u></p>
<ul type="disc">
<li class="m_-5987726935334821703m4618491395621331111m-4999658159260330428msolistparagraph">
We are currently in RHEL 7.9 OS and using pcs 0.9 version, Is there any fix planned/available for this affection version (0.9.x) of pcs ?<u></u><u></u></li><li class="m_-5987726935334821703m4618491395621331111m-4999658159260330428msolistparagraph">
Let us know in which release this CVEs fix are planned ?<u></u><u></u></li></ul>
<p class="MsoNormal"><b> </b><u></u><u></u></p>
<p class="MsoNormal"><b>Our system Details:-</b><u></u><u></u></p>
<p class="MsoNormal">OS Version: RHEL 7.9<u></u><u></u></p>
<p class="MsoNormal">Cluster lab PCS version: 0.9<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<table cellspacing="8" cellpadding="0" border="0">
<tbody>
<tr>
<td style="padding:0.75pt">
<p class="MsoNormal"><a href="http://www.ericsson.com/" target="_blank"><span style="font-size:10pt;font-family:"Ericsson Hilda";color:windowtext;text-decoration:none"><img style="width: 0.3125in; height: 0.3125in;" id="m_-5987726935334821703m_4618491395621331111m_-4999658159260330428Picture_x0020_1" src="cid:185ceb400224cff311" alt="Ericsson" width="30" height="30" border="0"></span></a><u></u><u></u></p>
</td>
</tr>
<tr>
<td style="padding:0.75pt"></td>
</tr>
<tr>
<td style="padding:0.75pt 0.75pt 5pt">
<p class="MsoNormal"><b><span style="font-size:10pt;font-family:"Ericsson Hilda"">Gunasekar A
</span></b><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Senior Software Engineer</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">BDGS SA BSS PDU BSS PDG EC CH NGCRS</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Mobile: +919894561292</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Email ID:
<a href="mailto:a.gunasekar@ericsson.com" target="_blank">a.gunasekar@ericsson.com</a></span><u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Manage your subscription:<br>
<a href="https://protect2.fireeye.com/v1/url?k=31323334-501d5122-313273af-454445555731-d41b18997a64a81a&q=1&e=59a6df80-228c-4bfb-a417-9820eb29ea91&u=https%3A%2F%2Flists.clusterlabs.org%2Fmailman%2Flistinfo%2Fusers" target="_blank">https://lists.clusterlabs.org/mailman/listinfo/users</a><br>
<br>
ClusterLabs home: <a href="https://protect2.fireeye.com/v1/url?k=31323334-501d5122-313273af-454445555731-b3537e65a3f1def4&q=1&e=59a6df80-228c-4bfb-a417-9820eb29ea91&u=https%3A%2F%2Fwww.clusterlabs.org%2F" target="_blank">
https://www.clusterlabs.org/</a><u></u><u></u></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br clear="all">
<br>
-- <u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12pt">Regards,<u></u><u></u></p>
</div>
<p class="MsoNormal">Reid Wahl (He/Him)<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Senior Software Engineer, Red Hat<u></u><u></u></p>
</div>
<p class="MsoNormal">RHEL High Availability - Pacemaker<u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br clear="all">
<br>
-- <u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12pt">Regards,<u></u><u></u></p>
</div>
<p class="MsoNormal">Reid Wahl (He/Him)<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Senior Software Engineer, Red Hat<u></u><u></u></p>
</div>
<p class="MsoNormal">RHEL High Availability - Pacemaker<u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div></blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div>Regards,<br><br></div>Reid Wahl (He/Him)<br></div><div>Senior Software Engineer, Red Hat<br></div>RHEL High Availability - Pacemaker<br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>