SCIENTIFIC-LINUX-ERRATA Archives

January 2019

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Important: keepalived on SL7.x x86_64
From:
Scott Reid <[log in to unmask]>
Reply To:
[log in to unmask]
Date:
Thu, 3 Jan 2019 22:50:35 -0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (20 lines) 
Synopsis: Important: keepalived security update

Advisory ID:       SLSA-2019:0022-1

Issue Date:        2019-01-03

CVE Numbers:       CVE-2018-19115

--



Security Fix(es):



* keepalived: Heap-based buffer overflow when parsing HTTP status codes

allows for denial of service or possibly arbitrary code execution

(CVE-2018-19115)

--



SL7

  x86_64

    keepalived-1.3.5-8.el7_6.x86_64.rpm

    keepalived-debuginfo-1.3.5-8.el7_6.x86_64.rpm



- Scientific Linux Development Team

ATOM RSS1 RSS2