gpp_maybe Security update for corosync

SUSE-SLE-SDK-12-SP3-2018-771

This update for corosync fixes the following issue: - CVE-2018-1084: Integer overflow in totemcrypto:authenticate_nss_2_3() could lead to command execution (bsc#1089346) - Providing an empty uid or gid results in coroparse adding uid 0. (bsc#1066585) - Fix a problem with configuration file incompatibilities that was causing corosync to not work after upgrading from SLE-11-SP4-HA to SLE-12/15-HA. (bsc#1083561)

• Release Date
  May 2 2018
• References
  Bugzilla: 1066585, 1083561, 1089346
  CVEs: CVE-2018-1084
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 s390x

• Packages
  corosync
  The Corosync Cluster Engine and Application Programming Interfaces

  2.3.6-9.13.1

  lock src

  libcorosync-devel
  The Corosync Cluster Engine Development Kit

  2.3.6-9.13.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

• Packages
  corosync
  The Corosync Cluster Engine and Application Programming Interfaces

  2.3.6-9.13.1

  lock src

  libcorosync-devel
  The Corosync Cluster Engine Development Kit

  2.3.6-9.13.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

• Packages
  corosync
  The Corosync Cluster Engine and Application Programming Interfaces

  2.3.6-9.13.1

  lock src

  libcorosync-devel
  The Corosync Cluster Engine Development Kit

  2.3.6-9.13.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

• Packages
  corosync
  The Corosync Cluster Engine and Application Programming Interfaces

  2.3.6-9.13.1

  lock src

  libcorosync-devel
  The Corosync Cluster Engine Development Kit

  2.3.6-9.13.1

  lock rpm