RHBA-2013:0013 - Bug Fix Advisory

Topic

Updated openais packages that fix multiple bugs are now available for Red Hat
Enterprise Linux 5.

Description

The Application Interface Specification (AIS) is an API and a set of policies
for developing applications that maintain services during faults. The OpenAIS
Standards Based Cluster Framework is an OSI-certified implementation of the
Service Availability Forum AIS. The openais package contains the openais
executable, OpenAIS service handlers, default configuration files and an init
script.

This update fixes the following bugs:

• The FAIL_TO_RECV_CONST constant specifies how many rotations of a token should

be received without receiving any messages before a new configuration is formed.
Previously, this constant was set to 50, which is low for most modern switch
hardware. This could cause processes, such as corosync, to terminate
unexpectedly. The FAIL_TO_RECV_CONST constant is now set to 2500, which prevents
processes from crashing in this scenario. (BZ#671575)

• The syslog utility prints data to standard output as a function with a dynamic

number of arguments. Previously, a logged string was passed directly as a format
string, and if formatting characters were included, stack overflow or underflow
could occur. This consequently caused the aisexec process to terminate
unexpectedly with a segmentation fault. The underlying source code has been
modified so that aisexec no longer crashes in this scenario. (BZ#794837)

• Previously, the range condition for the update_aru() function could cause

incorrect check of message IDs. Due to this, in rare cases, the corosync utility
entered the "FAILED TO RECEIVE" state, and so failed to receive multicast
packets. With this update, the range value in the update_aru() function is no
longer checked for; the fail_to_recv_const constant performs such checks. Now,
corosync does not fail to receive packets. (BZ#806901)

• This update adds support for cluster hearbeat configuration through VLAN

network interfaces. (BZ#810250)

All users of openais are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 671575 - [TOTEM] FAILED TO RECEIVE + aisexec crash
• BZ - 806901 - A rare condition can lead to fail to recv

CVEs

(none)

References

(none)