Fedora alert FEDORA-2018-d87e29047d (corosync)

From:
    	     
 
updates@fedoraproject.org 
To:
    	     
 
package-announce@lists.fedoraproject.org 
Subject:
    	     
 
[SECURITY] Fedora 26 Update: corosync-2.4.4-1.fc26 
Date:
    	     
 
Thu, 19 Apr 2018 16:23:51 +0000 (UTC)
Message-ID:
    	     
 
<20180419162351.8AFB160BA788@bastion01.phx2.fedoraproject.org>
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-d87e29047d
2018-04-19 16:22:28.555326
--------------------------------------------------------------------------------

Name        : corosync
Product     : Fedora 26
Version     : 2.4.4
Release     : 1.fc26
URL         : http://corosync.github.io/corosync/

Summary     : The Corosync Cluster Engine and Application Programming Interfaces
Description :
This package contains the Corosync Cluster Engine Executive, several default
APIs and libraries, default configuration files, and an init script.

--------------------------------------------------------------------------------
Update Information:

New upstream release with security fix for CVE-2018-1084
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 12 2018 Jan Friesse <jfriesse@redhat.com> - 2.4.4-1
- New upstream release
* Fri Oct 20 2017 Jan Friesse <jfriesse@redhat.com> - 2.4.3-1
- New upstream release
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1552830 - CVE-2018-1084 corosync: Integer overflow in
exec/totemcrypto.c:authenticate_nss_2_3() function
        https://bugzilla.redhat.com/show_bug.cgi?id=1552830

--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-d87e29047d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgr...

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys

--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org