Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0853-1

Опубликовано: 07 июн. 2021
Источник: suse-cvrf

Описание

Security update for csync2

This update for csync2 fixes the following issues:

  • CVE-2019-15522: Fixed an issue where daemon fails to enforce TLS (bsc#1147137)
  • CVE-2019-15523: Fixed an incorrect TLS handshake error handling (bsc#1147139)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
csync2-2.0+git.1461714863.10636a4-lp152.5.3.1

Ссылки

Описание

An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.

Затронутые продукты
openSUSE Leap 15.2:csync2-2.0+git.1461714863.10636a4-lp152.5.3.1
Ссылки

Описание

An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.

Затронутые продукты
openSUSE Leap 15.2:csync2-2.0+git.1461714863.10636a4-lp152.5.3.1
Ссылки