Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:1858-1

Опубликовано: 04 июн. 2021
Источник: suse-cvrf

Описание

Security update for csync2

This update for csync2 fixes the following issues:

  • CVE-2019-15522: Fixed an issue where daemon fails to enforce TLS (bsc#1147137)
  • CVE-2019-15523: Fixed an incorrect TLS handshake error handling (bsc#1147139)

Список пакетов

Image SLES15-SAP-Azure
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-Azure-BYOS
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-Azure-LI-BYOS-Production
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-Azure-VLI-BYOS-Production
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-EC2-HVM
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-EC2-HVM-BYOS
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-GCE
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-GCE-BYOS
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP1-SAP-Azure
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP1-SAP-Azure-BYOS
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP1-SAP-EC2-HVM
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP1-SAP-EC2-HVM-BYOS
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP1-SAP-GCE
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP1-SAP-GCE-BYOS
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP2-SAP-Azure
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP2-SAP-BYOS-Azure
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP2-SAP-BYOS-GCE
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP2-SAP-EC2-HVM
csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SP2-SAP-GCE
csync2-2.0+git.1461714863.10636a4-4.6.1
SUSE Linux Enterprise High Availability Extension 15
csync2-2.0+git.1461714863.10636a4-4.6.1
SUSE Linux Enterprise High Availability Extension 15 SP1
csync2-2.0+git.1461714863.10636a4-4.6.1
SUSE Linux Enterprise High Availability Extension 15 SP2
csync2-2.0+git.1461714863.10636a4-4.6.1

Ссылки

Описание

An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.

Затронутые продукты
Image SLES15-SAP-Azure-BYOS:csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-Azure-LI-BYOS-Production:csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-Azure-VLI-BYOS-Production:csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-Azure:csync2-2.0+git.1461714863.10636a4-4.6.1
Ссылки

Описание

An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.

Затронутые продукты
Image SLES15-SAP-Azure-BYOS:csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-Azure-LI-BYOS-Production:csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-Azure-VLI-BYOS-Production:csync2-2.0+git.1461714863.10636a4-4.6.1
Image SLES15-SAP-Azure:csync2-2.0+git.1461714863.10636a4-4.6.1
Ссылки
Уязвимость SUSE-SU-2021:1858-1