Issued:

2013-01-07

Updated:

2013-01-07

RHBA-2013:0013 - openais bug fix update

Synopsis

openais bug fix update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated openais packages that fix multiple bugs are now available for Red Hat Enterprise Linux 5.

Description

The Application Interface Specification (AIS) is an API and a set of policies for developing applications that maintain services during faults. The OpenAIS Standards Based Cluster Framework is an OSI-certified implementation of the Service Availability Forum AIS. The openais package contains the openais executable, OpenAIS service handlers, default configuration files and an init script.

This update fixes the following bugs:

• The FAIL_TO_RECV_CONST constant specifies how many rotations of a token should be received without receiving any messages before a new configuration is formed. Previously, this constant was set to 50, which is low for most modern switch hardware. This could cause processes, such as corosync, to terminate unexpectedly. The FAIL_TO_RECV_CONST constant is now set to 2500, which prevents processes from crashing in this scenario. (BZ#671575)

• The syslog utility prints data to standard output as a function with a dynamic number of arguments. Previously, a logged string was passed directly as a format string, and if formatting characters were included, stack overflow or underflow could occur. This consequently caused the aisexec process to terminate unexpectedly with a segmentation fault. The underlying source code has been modified so that aisexec no longer crashes in this scenario. (BZ#794837)

• Previously, the range condition for the update_aru() function could cause incorrect check of message IDs. Due to this, in rare cases, the corosync utility entered the "FAILED TO RECEIVE" state, and so failed to receive multicast packets. With this update, the range value in the update_aru() function is no longer checked for; the fail_to_recv_const constant performs such checks. Now, corosync does not fail to receive packets. (BZ#806901)

• This update adds support for cluster hearbeat configuration through VLAN network interfaces. (BZ#810250)

All users of openais are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

Affected Products

Updated Packages

• openais-debuginfo-0.80.6-37.el5.i386.rpm
• openais-debuginfo-0.80.6-37.el5.x86_64.rpm
• openais-devel-0.80.6-37.el5.x86_64.rpm
• openais-debuginfo-0.80.6-37.el5.ppc.rpm
• openais-devel-0.80.6-37.el5.i386.rpm
• openais-0.80.6-37.el5.ppc.rpm
• openais-devel-0.80.6-37.el5.ppc64.rpm
• openais-devel-0.80.6-37.el5.ppc.rpm
• openais-debuginfo-0.80.6-37.el5.ia64.rpm
• openais-0.80.6-37.el5.x86_64.rpm
• openais-0.80.6-37.el5.ia64.rpm
• openais-0.80.6-37.el5.i386.rpm
• openais-devel-0.80.6-37.el5.ia64.rpm
• openais-debuginfo-0.80.6-37.el5.ppc64.rpm
• openais-0.80.6-37.el5.src.rpm

Fixes

• This content is not included.BZ - 671575
• This content is not included.BZ - 806901

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.