[pve-devel] applied: [PATCH v2/RESEND corosync-pve 0/3] fix CVE-2018-1084

Wolfgang Bumiller w.bumiller at proxmox.com
Fri Apr 13 13:31:00 CEST 2018


applied

On Fri, Apr 13, 2018 at 11:10:30AM +0200, Fabian Grünbichler wrote:
> Fabian Grünbichler (3):
>   fix CVE-2018-1084: DoS via malformed packet
>   reformat old patches
>   bump version to 2.4.2-pve4
> 
>  changelog.Debian                                   |  6 +++
>  Makefile                                           |  2 +-
>  .../0001-add-Provides-Replaces-corosync-pve.patch  |  8 ++--
>  .../0002-don-t-install-default-corosync.conf.patch | 10 ++--
>  ...restart-after-package-upgrade-is-complete.patch |  8 ++--
>  patches/0004-remove-init-script.patch              |  8 ++--
>  ...c-pve-postinst-for-restart-on-dist-upgrad.patch |  8 ++--
>  ...add-libcorosync4-pve-transitional-package.patch |  8 ++--
>  ...nly-start-corosync.service-if-conf-exists.patch | 10 ++--
>  ...09-totemcrypto-Check-length-of-the-packet.patch | 53 ++++++++++++++++++++++
>  patches/series                                     |  1 +
>  11 files changed, 91 insertions(+), 31 deletions(-)
>  create mode 100644 patches/0009-totemcrypto-Check-length-of-the-packet.patch
> 
> -- 
> 2.14.2




More information about the pve-devel mailing list