Lucene search

K
suseSuseOPENSUSE-SU-2018:1136-1
HistoryMay 03, 2018 - 12:07 p.m.

Security update for corosync (important)

2018-05-0312:07:39
lists.opensuse.org
7

0.05 Low

EPSS

Percentile

92.0%

This update for corosync fixes the following issues:

  • CVE-2018-1084: Integer overflow in totemcrypto:authenticate_nss_2_3()
    could lead to command execution (bsc#1089346)
  • Providing an empty uid or gid results in coroparse adding uid 0.
    (bsc#1066585)
  • Fix a problem with configuration file incompatibilities that was causing
    corosync to not work after upgrading from SLE-11-SP4-HA to SLE-12/15-HA.
    (bsc#1083561)

This update was imported from the SUSE:SLE-12-SP3:Update update project.