RHBA-2020:0996 - Bug Fix Advisory

Topic

An update for pcs is now available for Red Hat Enterprise Linux 7.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.8 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux High Availability for x86_64 7 x86_64
• Red Hat Enterprise Linux Resilient Storage for x86_64 7 x86_64
• Red Hat Enterprise Linux Resilient Storage for IBM z Systems 7 s390x
• Red Hat Enterprise Linux High Availability for IBM z Systems 7 s390x
• Red Hat Enterprise Linux Resilient Storage for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux High Availability for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux High Availability for IBM Power, little endian - Extended Life Cycle Support 7 ppc64le
• Red Hat Enterprise Linux Resilient Storage for IBM Power, little endian - Extended Life Cycle Support 7 ppc64le

Fixes

• BZ - 1500012 - provide a hint about the "set" option for cmds containing multiple "then" keywords in their constraint definitions
• BZ - 1551663 - Pcs should check for non-valid characters in corosync.conf keynames
• BZ - 1595444 - RFE: ability to clear stonith history
• BZ - 1619253 - premature standby status reported by pcs while standby is in progress
• BZ - 1665898 - pcsd: SSL Certificate with Wrong Hostname
• BZ - 1671174 - CommandRunner.run() does not prepend pacemaker_binaries directory [RHEL 7]
• BZ - 1710750 - Catch and translate LibraryError exceptions
• BZ - 1712315 - pcs config restore fails with Invalid cross-device link
• BZ - 1725849 - 'pcs resource bundle reset' fails if existing port-map and storage-map ids are reused
• BZ - 1730747 - pcs rebase bug for 7.8
• BZ - 1760434 - [fips] pcsd fails to start in fips mode due to OpenSSL::PKey::DHError
• BZ - 1765606 - [SECURITY] Hiding Server Name HTTP header from Webrick (used in pcs/pcsd)
• BZ - 1770973 - [RFE] The cluster should not be allowed to disable a resource if dependent resources are still online

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index