SUSE-SU-2021:1952-1

Details

This update for csync2 fixes the following issues:

CVE-2019-15522: Fixed an issue where daemon fails to enforce TLS (bsc#1147137)
CVE-2019-15523: Fixed an incorrect TLS handshake error handling (bsc#1147139)

Affected Packages

csync2

SUSE Linux Enterprise High Availability Extension 12 SP3SUSE Linux Enterprise High Availability Extension 12 SP4SUSE Linux Enterprise High Availability Extension 12 SP5

Fixed in:

2.0+git.1368794815.cf835a7-3.9.5

References

REPORT

https://bugzilla.suse.com/1147137

REPORT

https://bugzilla.suse.com/1147139

WEB

https://www.suse.com/security/cve/CVE-2019-15522

WEB

https://www.suse.com/security/cve/CVE-2019-15523

ADVISORY

https://www.suse.com/support/update/announcement/2021/suse-su-20211952-1/