UbuntuUpdates.org

Package "libcpg4"

Name: libcpg4

Description:

cluster engine CPG library
Latest version: 2.3.5-3ubuntu2.3
Release: xenial (16.04)
Level: security
Repository: main
Head package: corosync
Homepage: http://corosync.github.io/corosync/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libcpg4"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libcpg4" in Xenial

Repository Area Version
base main 2.3.5-3ubuntu1
updates main 2.3.5-3ubuntu2.3

Changelog

Version: 2.3.5-3ubuntu2.3 2019-05-30 17:07:02 UTC

  corosync (2.3.5-3ubuntu2.3) xenial-security; urgency=medium

  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE-2018-1084-*.patch: check length of the packet
      in exec/totemcrypto.c.
    - CVE-2018-1084

 -- <email address hidden> (Leonidas S. Barbosa) Thu, 30 May 2019 09:36:25 -0300
CVE-2018-1084 corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.


About   -   Send Feedback to @ubuntu_updates