High ELSA-2018-1169 1 CVE

Important: corosync security update (Oracle Linux 7)

Published Apr 30, 2018 · Updated Apr 30, 2018

Ecosystem: Oracle Linux

Summary

[2.4.3-2.1]
- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	corosync	0:2.4.3-2.el7_5.1
Oracle Linux · 7	corosync-qdevice	0:2.4.3-2.el7_5.1
Oracle Linux · 7	corosync-qnetd	0:2.4.3-2.el7_5.1
Oracle Linux · 7	corosynclib	0:2.4.3-2.el7_5.1
Oracle Linux · 7	corosynclib-devel	0:2.4.3-2.el7_5.1

Vulnerabilities 1

High 7.5

CVE-2018-1084

corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.

corosync corosync Debian Ubuntu

Apr 12, 2018