[pve-devel] [PATCH v2/RESEND corosync-pve 0/3] fix CVE-2018-1084

Fabian Grünbichler f.gruenbichler at proxmox.com
Fri Apr 13 11:10:30 CEST 2018


Fabian Grünbichler (3):
  fix CVE-2018-1084: DoS via malformed packet
  reformat old patches
  bump version to 2.4.2-pve4

 changelog.Debian                                   |  6 +++
 Makefile                                           |  2 +-
 .../0001-add-Provides-Replaces-corosync-pve.patch  |  8 ++--
 .../0002-don-t-install-default-corosync.conf.patch | 10 ++--
 ...restart-after-package-upgrade-is-complete.patch |  8 ++--
 patches/0004-remove-init-script.patch              |  8 ++--
 ...c-pve-postinst-for-restart-on-dist-upgrad.patch |  8 ++--
 ...add-libcorosync4-pve-transitional-package.patch |  8 ++--
 ...nly-start-corosync.service-if-conf-exists.patch | 10 ++--
 ...09-totemcrypto-Check-length-of-the-packet.patch | 53 ++++++++++++++++++++++
 patches/series                                     |  1 +
 11 files changed, 91 insertions(+), 31 deletions(-)
 create mode 100644 patches/0009-totemcrypto-Check-length-of-the-packet.patch

-- 
2.14.2





More information about the pve-devel mailing list