UbuntuUpdates.org

Package "libcorosync-common4"

Name: libcorosync-common4

Description:

cluster engine common library

Latest version: 2.3.5-3ubuntu2.3
Release: xenial (16.04)
Level: security
Repository: main
Head package: corosync
Homepage: http://corosync.github.io/corosync/

Links


Download "libcorosync-common4"


Other versions of "libcorosync-common4" in Xenial

Repository Area Version
base main 2.3.5-3ubuntu1
updates main 2.3.5-3ubuntu2.3

Changelog

Version: 2.3.5-3ubuntu2.3 2019-05-30 17:07:02 UTC

  corosync (2.3.5-3ubuntu2.3) xenial-security; urgency=medium

  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE-2018-1084-*.patch: check length of the packet
      in exec/totemcrypto.c.
    - CVE-2018-1084

 -- <email address hidden> (Leonidas S. Barbosa) Thu, 30 May 2019 09:36:25 -0300

CVE-2018-1084 corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.



About   -   Send Feedback to @ubuntu_updates