File _patchinfo of Package patchinfo.18381

<patchinfo incident="18381">
  <issue tracker="cve" id="2020-35459"/>
  <issue tracker="cve" id="2021-3020"/>
  <issue tracker="bnc" id="1154927">ha-cluster-init creates invalid  /etc/modules-load.d/watchdog.conf - Failed to find module '/dev/watchdog'</issue>
  <issue tracker="bnc" id="1180571">VUL-0: CVE-2021-3020: hawk2: Root privilege escalation via hawk_invoke and crmsh</issue>
  <issue tracker="bnc" id="1180137">crm resource start/stop completion wrong</issue>
  <issue tracker="bnc" id="1178454">crmsh bootstrap should check crossed configured sbd device</issue>
  <issue tracker="bnc" id="1178869">crmsh bootstrap should configure soft watchdog if needed</issue>
  <issue tracker="bnc" id="1179999">VUL-0: CVE-2020-35459: crmsh: Root privilege escalation via hawk_invoke and crmsh</issue>
  <issue tracker="bnc" id="1180688">L3: Long run time of crm_report on HANA systems with optane memory</issue>
  <issue tracker="jsc" id="ECO-1658"/>
  <packager>XinLiang</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for crmsh</summary>
  <description>This update for crmsh fixes the following issues:

- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)
</description>
</patchinfo>