Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:1858-1

Опубликовано: 04 июн. 2021
Источник: suse-cvrf

Описание

Security update for csync2

This update for csync2 fixes the following issues:

  • CVE-2019-15522: Fixed an issue where daemon fails to enforce TLS (bsc#1147137)
  • CVE-2019-15523: Fixed an incorrect TLS handshake error handling (bsc#1147139)

Список пакетов

SUSE Linux Enterprise High Availability Extension 15
csync2-2.0+git.1461714863.10636a4-4.6.1
SUSE Linux Enterprise High Availability Extension 15 SP1
csync2-2.0+git.1461714863.10636a4-4.6.1
SUSE Linux Enterprise High Availability Extension 15 SP2
csync2-2.0+git.1461714863.10636a4-4.6.1

Ссылки

Описание

An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP1:csync2-2.0+git.1461714863.10636a4-4.6.1
SUSE Linux Enterprise High Availability Extension 15 SP2:csync2-2.0+git.1461714863.10636a4-4.6.1
SUSE Linux Enterprise High Availability Extension 15:csync2-2.0+git.1461714863.10636a4-4.6.1
Ссылки

Описание

An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP1:csync2-2.0+git.1461714863.10636a4-4.6.1
SUSE Linux Enterprise High Availability Extension 15 SP2:csync2-2.0+git.1461714863.10636a4-4.6.1
SUSE Linux Enterprise High Availability Extension 15:csync2-2.0+git.1461714863.10636a4-4.6.1
Ссылки
Уязвимость SUSE-SU-2021:1858-1