CVE-2019-15522

CVE-2019-15522 affects LINBIT csync2 up to 2.0. The issue: in csync_daemon_session (daemon.c) the daemon does not enforce TLS when SSL is required, allowing hello commands to succeed despite TLS requirements. Documented fixes across multiple vendors/distributions (SUSE/OpenSUSE OSV entries and SU...